AI Risk Wire

Cases › operational mistake › LR-2026-0555

Apple Support app v5.13 accidentally included Claude.md

Preliminary Why: 1 report: 36Kr · subject to change · 1 independent report

Status: no action reported

Severity minor
Reported 1 May 2026
Developer and model Apple

No source states: loss or records, agent tool, could do, deployer, industry.

Severity minor: Test: contained to one deployer, routine cleanup, no third party touched. Fact: Apple recalled the update within 24 hours; no third-party effect is stated.

Apple's Apple Support app, version v5.13, was pushed as an update on May 1 and unexpectedly included a Claude.md file. The source describes such a file as one that tells an AI what a project is, how to build it, and what to avoid, and says Apple uses Claude Code internally to build production-level applications. The file exposed the app's dialogue architecture, in which an automatic AI backend and human agents switch through a protocol layer. Aaron Perris, an analyst at MacRumors, discovered it. Apple recalled the update within 24 hours, but some content was already exposed. The source says the file itself contained no secrets, and it raises questions about how AI-written code reached a release package despite review.

What happened

No source tells the story step by step yet.

What was done

No source states an action or fix.

Risks

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Harness

Tool allow-list · Fail-closed defaults · Stop control

Application

Human approval for high-impact actions · Change review and separation of duties · Least-privilege access for the agent · Production kept apart from test · Activity logs · Adversarial testing before deployment

Infrastructure / target

Backups and recovery

Evidence

No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.

Show the full account: 3 items from the primary sources

What happened, in order

  1. 2026-05-01 Apple Support app update v5.13 was pushed and unexpectedly included Claude.md.

Not dated in the sources:

  • Aaron Perris, an analyst at MacRumors, discovered and exposed the included file.
  • Apple urgently recalled the update.
Show every field, with its source and grade

The AI system

Developer
Apple
C one secondary source states it
What it was for
Official after-sales service app with online chat with Apple experts
C one secondary source states it

What happened

Earliest source we hold
2026-05-01
D inferred by us from the described behaviour, reason shown
Who caught it
an outside party
C one secondary source states it
What went wrong
operational mistake
D inferred by us from the described behaviour, reason shown

Impact

Severity
minor
D inferred by us from the described behaviour, reason shown
Why this severity
Test: contained to one deployer, routine cleanup, no third party touched. Fact: Apple recalled the update within 24 hours; no third-party effect is stated.
D inferred by us from the described behaviour, reason shown

Notes on gaps

The year 2026 comes from the article date. The order of discovery relative to the recall is not stated. The Gurman item is an earlier, separate report, not a fact about this incident.

LR-2026-0555 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON