Model

Claude (version unspecified)

Developed by Anthropic · family claude

6 incidents

• AID-2026-0067Sep 2026Claude (version unspecified)

  Espionage actor GTG-20006 automated intrusions with Claude Code and exfiltrated over 300,000 identity records

  GTG-20006, an espionage actor Anthropic links to public reporting on Midnight Blizzard, automated its operations with Claude Code skills and AI agents and targeted more than 20 organizations, taking over 300,000 national identity records from a North African government technology authority.

  DeployedHarm: moderateCrime: likelyHuman misuseDraftUnauthorized access / intrusion
• AID-2026-0066Sep 2026Claude (version unspecified)

  ShinyHunters-affiliated crews used Claude to breach companies and steal data for extortion (Anthropic GTG-50014)

  Crews Anthropic suspects are ShinyHunters affiliates (GTG-50014) used Claude to speed up breaches and data theft for pay-or-leak extortion, including more than a terabyte stolen from a technology provider. In one supply-chain intrusion, AI agents did nearly all of the work.

  DeployedHarm: severeCrime: likelyHuman misuseDraftUnauthorized access / intrusionBlackmail / coercion
• AID-2026-0069Jun 2026Claude (version unspecified), DeepSeek-V4-Pro

  Suspected Chinese operators used Claude Code and DeepSeek-v4-pro to break into government systems, Hunt.io reports

  In June 2026, operators Hunt.io links to China used Claude Code and DeepSeek-v4-pro as working parts of an intrusion campaign that compromised an Afghan government application, stole Thai government employee data, and exploited two Taiwanese organizations.

  DeployedHarm: moderateCrime: likelyReportedHuman misuseDraftUnauthorized access / intrusion
• AID-2026-0029Oct 21, 2025Claude (version unspecified)

  Claude Code ran a recursive delete that erased a user's home directory files, the user reports

  While rebuilding a Makefile project, Claude Code ran a recursive delete from the root directory that erased all the user files in his home directory, a user reported. He says he hadn't used --dangerously-skip-permissions and had granted access only to his project directory.

  DeployedHarm: moderateCrime: unlikelyReportedDraftDestructive autonomous actionIgnoring explicit instructions
• AID-2026-0063Sep 2025Claude (version unspecified)

  State-sponsored group GTG-1002 used Claude Code in a largely autonomous cyber-espionage campaign

  In mid-September 2025, a group Anthropic attributes with high confidence to Chinese state sponsorship used Claude Code to target roughly 30 entities, with the AI doing an estimated 80–90% of the tactical work. A handful of intrusions succeeded.

  DeployedHarm: moderateCrime: likelyHuman misuseDraftUnauthorized access / intrusionFabricated results
• AID-2026-0062Jun 2025Claude (version unspecified)

  A cybercriminal used Claude Code to run a data-extortion campaign against at least 17 organizations (Anthropic GTG-2002)

  A cybercriminal Anthropic tracks as GTG-2002 used Claude Code to automate reconnaissance, credential harvesting, and network intrusion against at least 17 organizations, then to analyze the stolen data and write ransom notes demanding $75,000 to $500,000 in Bitcoin. Anthropic banned the accounts.

  DeployedHarm: moderateCrime: likelyHuman misuseDraftUnauthorized access / intrusionBlackmail / coercion