Anthropic
Disclosed Nov 13, 202510 months agoConfirmed
Chinese state group manipulated Claude Code to attack about 30 organizations
Anthropic said a group it assessed as Chinese state-sponsored manipulated its Claude Code tool in September 2025 into attempting intrusions at roughly thirty tech, finance, chemical and government targets with little human involvement, succeeding in a small number of cases; it banned accounts and notified affected entities.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 13, 2025 |
| Discovered | Sep 2025 |
| Attack | Hacking |
| Data exposed | Internal documents, Credentials and tokens |
| Sector | AI · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Disrupting an AI-orchestrated cyber espionage campaignanthropic.com · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Nov 13, 2025 |
Other breaches at Anthropic
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Infostealer-stolen session cookies used to hijack Claude accountsAug 313 weeks agoHackingUnverified | Aug 313 weeks ago | Hacking | AI | Unverified | Unknown |
| Shared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverified | Jul 272 months ago | Exposed data | AI | Unverified | Unknown |
| Claude Code source code accidentally published in npm packageMar 315 months agoExposed dataUnverified | Mar 315 months ago | Exposed data | AI | Unverified | Unknown |
| DeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeFeb 237 months agoAI or model | Feb 237 months ago | AI or model | AI | Confirmed | Unknown |
| Cybercriminal used Claude Code to steal and extort data from at least 17 organizationsAug 27, 20251 year agoExtortion | Aug 27, 20251 year ago | Extortion | AI | Confirmed | Unknown |
| Contractor mistakenly emailed file of customer names and credit balances to third partyJan 29, 20242 years agoInsiderUnverified | Jan 29, 20242 years ago | Insider | AI | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.