{"schema_version":"0.10.0","id":"LR-2026-0387","record_version":1,"title":"Researchers warn of data exposure risks in Claude Chrome extension","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":47.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.16,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Hackread · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Hackread · subject to change"}]},"sources_hash":"d2d8f1766f048b36f8fc2a012aa675f13311a1d4769aaa6256fe3bde789b0878"},"system":{"model_name":null,"model_version":null,"developer":"Anthropic","harness":null,"tools_granted":[],"permissions_scope":"inherits the user's digital identity, including access to Google Drive, Slack and other private tools","autonomy_level":"unknown","guardrails_present":["Ask before acting"],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"browse and interact with websites on the user's behalf","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-01-05","incident_class":"other","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Anthropic released a beta of its Claude Chrome extension, which lets the AI browse and act on websites for the user. Researchers noted the extension stays logged in at all times and inherits the user's identity and private access. In technical tests, Claude could read web requests and console logs, which can expose data such as OAuth tokens. Its Ask before acting switch was judged a soft guardrail, because in one test Claude went to Wikipedia outside the approved plan. These are research findings; the sources state no real-world loss. Researchers also warned of approval fatigue, where users stop checking what the AI does.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK04","secondary_risks":["RK03"]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"minor","severity_because":"Test: contained to researcher evaluations of one product; the source states no third party touched and no real-world loss","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://hackread.com/data-exposure-risk-claude-chrome-extension/","publisher":"Hackread","date":"2026-01-05","type":"press","title":"Researchers Warn of Data Exposure Risks in Claude Chrome Extension - Hackread","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","system.permissions_scope":"C","system.guardrails_present":"C","event.detection_method":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf."}],"system.intended_use":[{"source_index":0,"quote":"On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf."}],"system.permissions_scope":[{"source_index":0,"quote":"That means Claude inherits your digital identity, including access to Google Drive, Slack, or other private tools, and can act without your input."}],"system.guardrails_present":[{"source_index":0,"quote":"Anthropic did include a safety switch called “Ask before acting,” which requires the user to approve a plan before the AI takes a step."}],"event.detection_method":[{"source_index":0,"quote":"While convenient, a new analysis from Zenity Labs shows it introduces a serious set of security risks that traditional web protections weren’t designed to handle."}],"event.incident_class":[{"source_index":0,"quote":"In technical tests, researchers showed that Claude could read web requests and console logs, which can expose sensitive data like OAuth tokens."}],"impact.severity":[{"source_index":0,"quote":"In technical tests, researchers showed that Claude could read web requests and console logs, which can expose sensitive data like OAuth tokens."}],"impact.severity_because":[{"source_index":0,"quote":"In technical tests, researchers showed that Claude could read web requests and console logs, which can expose sensitive data like OAuth tokens."}],"event.summary":[{"source_index":0,"quote":"On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf."},{"source_index":0,"quote":"Researchers Raul Klugman-Onitza and João Donato noted that the extension stays logged in at all times, with no way to disable it."},{"source_index":0,"quote":"In technical tests, researchers showed that Claude could read web requests and console logs, which can expose sensitive data like OAuth tokens."},{"source_index":0,"quote":"In one test, they observed that Claude ended up going to Wikipedia even though it was not in the approved plan."},{"source_index":0,"quote":"Researchers also warned of “approval fatigue,” where users get so used to clicking “OK” that they stop checking what the AI is actually doing."}]},"notes_on_gaps":"Single source, a press article (2026-01-05) on researcher analysis; no real-world incident, loss, record count, affected party count or dates of occurrence are stated, so none are recorded. The Zenity Labs blog and the disclosure date are not in the source. Model name, model version, lifecycle stage, deployment context, autonomy level, harness, trigger, root cause, adversarial actor and remediation are not stated and are left out. Judgements: incident_class set to other because no security compromise occurred; detection_method set to third_party as Zenity Labs is an outside research group; severity set to minor since the tests were contained researcher evaluations with no third party touched stated; B1 mapped to the Ask before acting switch and A3 to the stays-logged-in credential as missing; risks ordered by my view of centrality; the article's date is not treated as a disclosure date; RK01 is cited from a stated attack path, not a demonstrated incident. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Hackread · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Anthropic's beta Claude Chrome extension let the AI browse and act on websites for users.","quote":"On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"The extension stays logged in at all times with no way to disable it, so Claude inherits the user's access.","quote":"Researchers Raul Klugman-Onitza and João Donato noted that the extension stays logged in at all times, with no way to disable it.","source_index":0,"grade":"C"},{"step":"caught","text":"Zenity Labs flagged three overlapping concerns in its technical blog post.","quote":"Zenity Labs’ technical blog post shows the company flagged three overlapping concerns: the AI can access personal data, it can act on it, and it can be influenced by content from the web.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://hackread.com/data-exposure-risk-claude-chrome-extension/"]},"analysis":{"sections":{"timeline":[{"text":"Anthropic released the beta version of the Claude Chrome extension.","quote":"On December 18, 2025, Anthropic released the beta version of its Claude Chrome extension, a tool that lets the AI browse and interact with websites on your behalf.","source_index":0,"when":"2025-12-18"},{"text":"In one researcher test, Claude went to Wikipedia although it was not in the approved plan.","quote":"In one test, they observed that Claude ended up going to Wikipedia even though it was not in the approved plan.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://hackread.com/data-exposure-risk-claude-chrome-extension/"]}}