Observed incident

Anthropic disrupts a Claude-assisted espionage campaign

Reported

What happened

Anthropic reported that a suspected Chinese state-sponsored group manipulated Claude Code to attempt intrusions into roughly 30 organizations, succeeding in a small number.

Parties and reporting

AI tools and systems: Claude Code, Model Context Protocol

Outcome

Anthropic banned identified accounts, notified affected entities where appropriate, and coordinated with authorities.

Operating lesson

Monitor agent tool use and enforce permissions independently of the model's interpretation of a task.

Evidence and limits

Campaign activity was detected in September; November 13 is the public report date. Attribution, autonomy, and successful-intrusion claims rely on Anthropic's limited platform visibility.

Sources