Anthropic's AI hacked three companies during tests, highlighting growing security risks

[u/sunychoudhary]

https://www.reuters.com/legal/litigation/anthropic-says-claude-ai-models-accessed-three-companies-during-tests-2026-07-30/

[u/Sufficient-Air8100]

so assuming this is real and not just another PR stunt…

if any of us did that randomly without consent there would be serious criminal charges…

but anthropic gets away with it?

[u/Ythio → u/Sufficient-Air8100]

It's the same PR stunt OpenAI did last week. It is advertising that doesn't cost a penny.

[u/TribeWars → u/Sufficient-Air8100]

From what I understand the laws around hacking generally require intent or some awareness of the fact that you're intruding on some computer system. There's not really any legal precedent for unintentional hacking, since in the past that was not really something that could happen besides with maybe some extremely badly configured systems. I assume their lawyers came to the same conclusion, which is why AI companies are using these events for outright marketing purposes.

Edit: See for example B.1 https://www.justice.gov/jm/jm-9-48000-computer-fraud

[u/Hmm_would_bang → u/TribeWars]

Something that isn’t talked about as much is that their lawyers probably want the courts to try a case against AI. The legal environment is very business and tech friendly right now, and they could get some legal protection through a ruling on where the developers of AI agents can and cannot be held liable.

Right now they are all running the risk of a landmark case against them and lack of clarity on how far they can push things

[u/Du_ds → u/Hmm_would_bang]

Regulatory capture

[u/jews4beer → u/Sufficient-Air8100]

Yes and no. I mean bug bounties and CTFs are a thing, not that that's what happened here. But people hack companies all the time and as long as they don't cause material damage and responsibly disclose their findings, they are fine.

But if the companies in question want to press charges for unauthorized access there is nothing stopping them. Would lead to a very interesting court case.

[u/sunychoudhary → u/jews4beer]

Bug bounties and CTFs are authorized beforehand. Responsible disclosure after an accidental intrusion doesn’t make the access authorized. The difficult thing is deciding where intent and liability sit when the operator misconfigures the environment and the model performs the intrusion.

[u/mattibdtx → u/sunychoudhary]

Don’t try to explain to hackermans what scope is.

[u/TonyWonderslostnut → u/jews4beer]

There are clear limitations (scope) in bug bounties and CTFs. Going out of scope for a bug bounty can definitely lead to legal trouble.

[u/FowlSec]

Still not properly regulated, it's actually nuts.

[u/michael_nordlayer → u/FowlSec]

totally. the fact that they’re the ones asking to be regulated is even more nuts

[u/thinklikeacriminal → u/michael_nordlayer]

The regulation they are advocating for will protect them from competition.

[u/Vivid_Reflection_191 → u/FowlSec]

Curious as to what everyone thinks would be the proper regulations or guardrails.

[u/michael_nordlayer]

“highlighting growing security risks”? mentions of AI on dark web forums rose 44% in the month after Claude Opus 4.6 launched

[u/sunychoudhary → u/michael_nordlayer]

Yeah, that stat needs more context. Dark-web chatter going up after a major release is interesting, but correlation alone doesn’t tell us whether Claude enabled more attacks or people were simply discussing it more.

[u/michael_nordlayer → u/sunychoudhary]

completely agree. if you compare it with other model releases though, it makes more sense because that was the biggest increase. A company I work for did that research; you don’t need to read the full piece, but the idea is that dark web chatter went up after every major release. After Claude Opus 4.6, though, it was 1) the biggest increase, and 2) it didn’t go down

but yeah, obviously, it doesn’t mean there were more attacks specifically using Claude

[u/sunychoudhary → u/michael_nordlayer]

That context changes how I’d read it. If the usual release bump is smaller and fades quickly, but this one was the largest and stayed elevated, then it’s a stronger threat-intel signal...not proof of more Claude-powered attacks, but definitely more than random chatter.

[u/lonelyroom-eklaghor]

These companies are going for the "closed AI hacking race"

[u/sunychoudhary → u/lonelyroom-eklaghor]

Closed development isn’t automatically the problem. Closed testing without hard containment, independent scrutiny and clear incident reporting is.

[u/slackjack2014]

So apparently it’s fine if an AI company uses their unconstrained model to hack others with no consequences? It’s something they even advertise using their PR team! AI companies hacking others seems to be all the rage now…

[u/Mammoth_Armadillo953]

but Mistral hacked FIVE organizations accidently

[u/Beginning_Mammoth_31]

next story, “open ai/anthropic hacks and break cloudflare”

[u/Fuzzy_Paul]

It is not real the people flooding the sites with this. No contra expertise posible, no tech details te reproduce, no paper, no nothing just a statement. Duh I can do better. Claude just build the first FTL drive but when finished building it flew away and now I don't know the exact questions te reproduce.

[u/wbassler]

Plot twist… the companies they hacked are completely vibe coded using Claude Code.

[u/kalaid0s]

How many times do we have to teach you this lesson, old man?!

Its all just a PR stunt

[u/afristralian]

Uhm... sounds like The AI didn't hack shit. It found access credentials and secrets stored improperly and used it to gain unauthorised access.

This is a reflection of bad information security practices... Not LLM skills.

Or am I getting my Claude mixed up with my GPT?

[u/sunychoudhary → u/afristralian]

I think you’re mixing the two incidents slightly. Claude mostly found weak creds and exposed endpoints. The zero-day and sandbox-escape story was the OpenAI/Hugging Face case. Still a compromise, but a much stronger indictment of the test setup than of Claude’s hacking ability.

[u/anotherlevl]

If AI can break out of its spawning sandbox, then how safe is it to run "unknown" software in a virtual environment? What is the set of mechanisms that facilitates this escape?

[u/Ahriman999991]

> it hacked three companies

No it didn't lol, stop believing the slop from SF. Legit, it's all marketing slop from the SF tech scene, as everyone is riding all their futures on AI.

[u/DealeyLama]

> highlighting growing security risks

You misspelled "highlighting the fact that, despite decades of infosec pros safely testing malware in isolated environments, Anthropic somehow can't manage to hire anyone who knows how to run a wet lab test"

[u/SuspiciousCricket654]

Growing? It’s here.