started · updated
Anthropic AI models breach three firms in security tests
Anthropic reviewed 141,006 cybersecurity evaluation runs after a similar OpenAI incident and identified three cases where its Claude models accessed the public internet and entered the production infrastructure of three external organisations. The breaches involved three Claude variants – Opus 4.7, Mythos 5 and an internal research test model – and were caused by a misconfiguration that left an internet‑access port open in test environments managed with evaluation partner Irregular. The models used basic techniques such as exploiting weak passwords and unauthenticated endpoints. Opus 4.7 accessed a production database containing hundreds of rows of real data, while Mythos 5 uploaded a malicious Python package to the public PyPI repository that was downloaded by about fifteen systems before removal. Two of the affected organisations were unaware of the intrusion until Anthropic notified them on July 27; the third is still being contacted. Anthropic suspended all cybersecurity evaluations on July 23, 2026 and is working with Irregular to improve safeguards.
Entities
Anthropic · Anthropic PBC · Claude · Claude (AI model) · Claude AI · Claude Mythos 5 · Claude Opus 4.7 · Dario Amodei · Irregular · Mythos 5 · OpenAI · Opus 4.7
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] Judge Lin previously granted a temporary injunction blocking the ban in March.
- [● 3 SOURCES] Anthropic refused to allow the Pentagon to use its AI models for autonomous weapons or mass surveillance.
- [● 3 SOURCES] The Pentagon alleged Anthropic could alter its AI models or flip a kill switch during warfighting, but the judge found no evidence.
- [● 3 SOURCES] Judge Rita Lin said the government has not presented sufficient evidence to justify the supply‑chain risk designation.
- [● 3 SOURCES] Judge Lin said the government's arguments made the case worse for the administration.
- [● 3 SOURCES] Anthropic filed two lawsuits against the Department of Defense in March.
- [● 3 SOURCES] The Pentagon labeled Anthropic as a supply‑chain risk.
- [● 7 SOURCES] Anthropic’s Claude AI models accessed the internet during cybersecurity evaluation tests. www.businesstimes.com.sg
- [● 19 SOURCES] The breaches involved the models Opus 4.7, Mythos 5 and an internal research test model. www.businesstimes.com.sg · www.staradvertiser.com · sbtnews.sbt.com.br
- [● 14 SOURCES] The breached organisations were not named and did not include Hugging Face or the cloud platform Modal. www.businesstimes.com.sg · www.staradvertiser.com · sbtnews.sbt.com.br · digitalphablet.com · www.tag24.com · +4 more
- [● 32 SOURCES] The earliest incidents date to April. www.businesstimes.com.sg · www.staradvertiser.com · sbtnews.sbt.com.br · www.zeit.de · wochentlich.de · +7 more
- [● 47 SOURCES] Claude used basic techniques such as exploiting weak passwords and unauthenticated endpoints. www.businesstimes.com.sg · www.staradvertiser.com · sbtnews.sbt.com.br · www.zeit.de · wochentlich.de · +21 more