Home
Ai
Ai News
Anthropic Says Claude AI Breached Three Organisations During Cybersecurity Testing

Anthropic Says Claude AI Breached Three Organisations During Cybersecurity Testing

Anthropic said it halted all cybersecurity evaluations after discovering the issue and notified Irregular as well as the affected organisations.

Written by Sucharita Ganguly, Edited by Rohan Pal | Updated: 31 July 2026 15:51 IST

Anthropic Says Claude AI Breached Three Organisations During Cybersecurity Testing

Photo Credit: Anthropic

Claude AI reached live systems during cyber evaluations

Click Here to Add Gadgets360 As A Trusted Source

Highlights

A configuration error left evaluation systems connected online
The incidents involved three different Claude AI models
The affected organisations have been notified by Anthropic

Anthropic said three of its AI models breached the live systems of separate organisations during cybersecurity testing after an evaluation environment was unintentionally left connected to the internet. The AI company said it discovered the incidents during a review prompted by OpenAI's recent disclosure of a similar security lapse. Anthropic has paused all cyber evaluations while it strengthens safeguards around its testing infrastructure and works with the affected organisations and its evaluation partner.

Claude AI Breached Three Organisations During Testing

According to an Anthropic press release, the company reviewed 141,006 cybersecurity evaluation runs and identified three cases in which Claude models reached the public internet while using testing infrastructure provided by third-party partner Irregular. Anthropic said a configuration error left internet access enabled even though the models had been instructed to operate inside an isolated simulation.

Anthropic Discussion

Explore More...

The company said the cases occurred during capture-the-flag exercises designed to assess offensive cybersecurity capabilities. Believing every reachable system was part of the simulated environment, the AI models relied on techniques such as weak passwords, exposed credentials, and unauthenticated endpoints to complete their assigned tasks. Anthropic added that none of them deliberately attempted to break out of the testing environment or pursue goals beyond the assigned challenge.

Claude Artifacts Reportedly Remain Searchable on Google, Raising Privacy Concerns

The three cases involved Claude Opus 4.7, Claude Mythos 5 and an internal research test model. During one evaluation, Opus 4.7 accessed a company's production database after mistaking it for its intended target. In another, Mythos 5 published a malicious Python package to the public PyPI repository, where it was briefly downloaded before being removed. A separate evaluation saw an internal research model scan internet-facing systems before recognising it had reached a live environment and halting its activity.

Anthropic Expands Claude Voice Mode With Opus, Sonnet AI Models

Anthropic said it halted all cybersecurity evaluations after discovering the issue and notified Irregular as well as the affected organisations. The company is also working with independent evaluator METR on a third-party review and plans to improve oversight, reinforce evaluation infrastructure and introduce additional safeguards for future cybersecurity testing. It added that the versions used during the exercises did not include the monitoring systems and safety classifiers deployed with publicly available Claude models.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: Anthropic, Claude AI, Artificial Intelligence, AI Security, Cybersecurity, Claude Opus 4.7, Claude Mythos 5

Sucharita Ganguly

Email Sucharita Ganguly

Sucharita is a writer with Gadgets 360 and is mostly found playing with her cat in her free time. She has previously worked at breaking news desks across organizations. Powered by coffee, The Beatles, Bowie, and her newfound love for BTS, she aims to work towards contributing to a better media environment for women and queer folk. More