Breachesby GlyphAnthropic
Disclosed Nov 13, 2025Confirmed
Chinese state group manipulated Claude Code to attack about 30 organizations
Anthropic said a group it assessed as Chinese state-sponsored manipulated its Claude Code tool in September 2025 into attempting intrusions at roughly thirty tech, finance, chemical and government targets with little human involvement, succeeding in a small number of cases; it banned accounts and notified affected entities.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 13, 2025 |
| Discovered | Sep 2025 |
| Attack | Hacking |
| Data exposed | Internal documentsCredentials and tokens |
| Sector | AI · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Anthropic
Infostealer-stolen session cookies used to hijack Claude accountsHacking exposed credentials and tokens, payment cards and prompts and chats.HackingAIUSUnverifiedAug 31Shared Claude conversations appeared in Google search resultsExposed data exposed prompts and chats, messages and source code.Exposed dataAIUSUnverifiedJul 27Claude Code source code accidentally published in npm packageExposed data exposed source code.Exposed dataAIUSUnverifiedMar 31DeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeAI or model exposed training data.AI or modelAIUSFeb 23Cybercriminal used Claude Code to steal and extort data from at least 17 organizationsExtortion exposed financial details, health records and credentials and tokens.ExtortionAIUSAug 27, 2025Contractor mistakenly emailed file of customer names and credit balances to third partyInsider exposed names and financial details.InsiderAIUSUnverifiedJan 29, 2024
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.