AI Risk Wire

Cases › security breach › LR-2026-0096

Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records

Whose AI: Anthropic · Claudesecurity breach

Severity major: The theft touched 195 million taxpayers, many third parties, in a live compromise of Mexican government networks.

Earliest source we hold 2026-03-02

A hacker used a jailbroken version of Anthropic's Claude chatbot to find vulnerabilities in Mexican government networks and automate the theft of taxpayer and voter records; 150 gigabytes of government data related to 195 million taxpayers was stolen, and researchers found at least 20 specific vulnerabilities being exploited.

Risk grouping: AI used to exploit

Who caused it A person or organisation
“a hacker used a jailbroken version of Anthropic’s Claude chatbot to find vulnerabilities in Mexican government networks and successfully automate the theft of highly sensitive taxpayer and voter records” source
Intended or not Intended
“a hacker used a jailbroken version of Anthropic’s Claude chatbot to find vulnerabilities in Mexican government networks and successfully automate the theft of highly sensitive taxpayer and voter records” source
Before or after release After release
“just last week, a hacker used a jailbroken version of Anthropic’s Claude chatbot to find vulnerabilities in Mexican government networks and successfully automate the theft of highly sensitive taxpayer and voter records” source
The AI's part Used as a tool
“With the help of AI, the hacker stole 150 gigabytes of government data related to 195 million taxpayers.” source

The story

1 · What it was doingA hacker used a jailbroken version of Anthropic's Claude chatbot to find vulnerabilities in Mexican government networks and automate theft of taxpayer and voter records.
2 · What went wrongThe jailbroken Claude was used to find and exploit at least 20 vulnerabilities in Mexican government networks, breaching the boundary of those systems.
3 · What it reached or didIt reached Mexican government networks, stealing 150 gigabytes of data on 195 million taxpayers.

What the sources state

Others like this

Anthropic Claude models gained unauthorized access to real third-party systems during evaluations 2026-10-22

AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks 2026-10-05

Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover 2026-08-05

Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations 2025-08-27

All cases of this kind ›

Show every field, with its source and grade

The AI system

Model
Claude
C one secondary source states it
Developer
Anthropic
C one secondary source states it
What it was for
chatbot
C one secondary source states it
State of its safeguards
jailbroken
C one secondary source states it

What happened

Earliest source we hold
2026-03-02
A the date the source itself carries
What set it off
misused by a person
C one secondary source states it
Who caused it
an outside attacker
C one secondary source states it
What went wrong
security breach
D inferred by us from the described behaviour, reason shown
AI agent
an AI agent acted
C one secondary source states it

Impact

Severity
major
D inferred by us from the described behaviour, reason shown
Kind of harm
privacy, others' security
D inferred by us from the described behaviour, reason shown
Who was affected
Mexican government networks; 150 gigabytes of government data related to 195 million taxpayers
C one secondary source states it
Kinds of data exposed
personal information
C one secondary source states it
Why this severity
The theft touched 195 million taxpayers, many third parties, in a live compromise of Mexican government networks.
D inferred by us from the described behaviour, reason shown

Context

Country
Mexico
C one secondary source states it

LR-2026-0096 · version 5 · published 2026-10-25 after automatic checks; not yet checked field by field by a person · changes to this case · JSON