Cases · Developer or organisation: Anthropic · Where it happened: company using AI · What set it off: hidden instructions in its input

What happened	What went wrong	Severity	Earliest source
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover Anthropicminor · earliest source 2026-08-05	security breach	minor	2026-08-05