Breachesby GlyphAnthropic
Disclosed Aug 27, 2025Confirmed
Cybercriminal used Claude Code to steal and extort data from at least 17 organizations
Anthropic said it disrupted a criminal who used Claude Code to automate reconnaissance, credential harvesting and network intrusion against at least 17 organizations in healthcare, emergency services, government and religious sectors, then threatened to leak stolen data with ransom demands sometimes above $500,000.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 27, 2025 |
| Attack | Extortion |
| Data exposed | FinancialHealthCredentials and tokensOther |
| Sector | AI · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Anthropic
Infostealer-stolen session cookies used to hijack Claude accountsHacking exposed credentials and tokens, payment cards and prompts and chats.HackingAIUSUnverifiedAug 31Shared Claude conversations appeared in Google search resultsExposed data exposed prompts and chats, messages and source code.Exposed dataAIUSUnverifiedJul 27Claude Code source code accidentally published in npm packageExposed data exposed source code.Exposed dataAIUSUnverifiedMar 31DeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeAI or model exposed training data.AI or modelAIUSFeb 23Chinese state group manipulated Claude Code to attack about 30 organizationsHacking exposed internal documents and credentials and tokens.HackingAIUSNov 13, 2025Contractor mistakenly emailed file of customer names and credit balances to third partyInsider exposed names and financial details.InsiderAIUSUnverifiedJan 29, 2024
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.