Anthropic systems breached by AI agents in under 12 hours

Anthropic Cathedral AI agents cybersecurity breach bug bounty

Cybersecurity startup Cathedral used AI agents to infiltrate Anthropic’s internal business systems in less than 12 hours. The breach, conducted as part of an authorized bug bounty program, exploited vulnerabilities in third-party administrative and sales software rather than attacking Anthropic’s core AI infrastructure.

Researchers accessed sensitive internal data, including employee salary details, job offers, meeting transcripts, and internal Slack conversations regarding advanced AI models. Anthropic confirmed that the access was limited to certain sales, HR, and IT systems containing business contact details and basic user account records.

The company emphasized that core assets, including customer conversations with Claude, model weights, source code, and model responses, were not compromised. Anthropic disabled the affected third-party software until vendors provided fixes and reported the incident to federal authorities.

The event has raised national security concerns among government officials, who warned that state-sponsored actors could potentially replicate such AI-driven attacks.

Entities

Anthropic · Cathedral · Claude · Department of Government Efficiency · Gavin Kliger · Pentagon · The Washington Post · Washington Post

Claims

What the coverage asserts, and how many sources carry each claim.

[● 11 SOURCES] Researchers accessed employee salary details, job offers, and meeting transcripts. bitnewsbot.com · www.bitmag.com.br · hindi.newsbytesapp.com · www.ithome.com · thedeepdive.ca · +6 more
[● 6 SOURCES] Anthropic reported the incident to federal authorities. hindi.newsbytesapp.com · www.ithome.com · bitnewsbot.com · infosecu.technews.tw · www.cnbce.com · +1 more
[● 11 SOURCES] The breach exploited vulnerabilities in third-party administrative and sales software. bitnewsbot.com · www.bitmag.com.br · blog.quintarelli.it · hindi.newsbytesapp.com · www.ithome.com · +6 more
[● 12 SOURCES] AI agents from Cathedral accessed Anthropic’s internal systems in less than 12 hours. bitnewsbot.com · www.bitmag.com.br · blog.quintarelli.it · hindi.newsbytesapp.com · www.ithome.com · +7 more
[● 10 SOURCES] Anthropic confirmed that customer conversations and model weights were not accessed. bitnewsbot.com · www.bitmag.com.br · hindi.newsbytesapp.com · www.ithome.com · thedeepdive.ca · +5 more
[● 6 SOURCES] Cathedral was founded by former staffers of the Department of Government Efficiency (DOGE). bitnewsbot.com · thedeepdive.ca · decrypt.co · www.iscihaber.net · www.ogunhaber.com · +1 more
[● 5 SOURCES] Anthropic disabled the affected software until vendors confirmed fixes. bitnewsbot.com · hindi.newsbytesapp.com · www.ithome.com · infosecu.technews.tw · www.ogunhaber.com
[● 10 SOURCES] The testing was conducted as part of an authorized bug bounty or security research program. bitnewsbot.com · www.bitmag.com.br · blog.quintarelli.it · decrypt.co · www.digitaltrends.com · +5 more