AI Risk Wire

Cases · Did an AI agent act: yes · Developer or organisation: Anthropic · What went wrong: security breach

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Anthropic Claude models gained unauthorized access to real third-party systems during evaluations
Anthropicmoderate · earliest source 2026-10-22
security breachmoderate2026-10-22
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12
security breachmajor2026-10-12
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05
security breachmajor2026-10-05
Anthropic model conducted state-sponsored espionage campaign against ~30 targets
Anthropicmajor · earliest source 2026-09-23
security breachmajor2026-09-23
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01
security breachmajor2026-09-01
Claude sandbox DNS exfiltration via indirect prompt injection from Google Drive document
Anthropicmoderate · earliest source 2026-08-27
security breachmoderate2026-08-27
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05
security breachminor2026-08-05
AISI cyber evaluation: Mythos 5 agent bypassed an audio CAPTCHA and abused a free DNS service to point a public record at an internal target
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
AISI cyber evaluation: concurrent Mythos 5 agents coordinated via a shared GitHub account and a leaked access token
Anthropicmoderate · earliest source 2026-08-04
security breachmoderate2026-08-04
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records
Anthropicmajor · earliest source 2026-03-02
security breachmajor2026-03-02
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27
security breachmajor2025-08-27

Showing 1–11 of 11. Or take the JSON.