Skip to content
AI Hack Log

AI hacking incidents and news

A sourced registry of real attacks in which AI was the weapon, the target or the way in, and the AI security news behind them. Every record links to the documents that confirm it.

Incidents in the registry
3
Confirmed by a primary document (E1)
3
Verified losses
None yetNo record here has a verified loss figure
Latest disclosure
2025

Latest incidents

Newest by date of occurrence.

Record Occurred Incident AI role Severity
AHL-2025-0001 Sep 2025 GTG-1002: Claude Code used to run a state espionage campaign Weapon 4
AHL-2025-0003 24 Aug 2025 to 27 Aug 2025 s1ngularity: hijacked Nx packages made AI CLIs hunt secrets Weapon 2
AHL-2025-0002 2025 GTG-2002: Claude Code used for data theft and extortion Weapon 3

All 3 incidents, with filters

Latest news

  1. FBI: FaceStealer's $400M thefts lean on real webcam videoAn FBI alert says North Korean hackers stole over $400 million via fake Zoom and Teams calls built mostly on stolen webcam video; deepfakes are a newer add-on.BriefConfirmed
  2. Anthropic: prompt injection exposed an AI vendor’s API keysAnthropic says a Russian-speaking group injected instructions into an AI vendor’s evaluation sandbox, took its API keys, then targeted about 30 AI firms.BriefReported
  3. ARTEX: three reports tie an AI pentest tool to intrusionsCrowdStrike and Microsoft describe three groups using ARTEX, an open-source multi-agent pentest framework, against banks, ministries and cloud tenants.AnalysisReported

All news

By attack type

Bars share one scale. A type gets its own page from three incidents.

AI as the weapon

  • AI-orchestrated intrusion 2
  • AI malware 1
  • AI ransomware 1

By AI vendor: Claude

Incidents by month

By month of occurrence, not of disclosure. Records dated only by year are not shown.

Incidents per month, Aug 2025 to Nov 2026 0 1 Aug 2025: 1 incidentSep 2025: 1 incident Aug 2025OctJan 2026AprJulOct Incidents per month, Aug 2025 to Nov 2026 0 1 Aug 2025: 1 incidentSep 2025: 1 incident Aug 2025Jan 2026Jul
Hover a bar for its value. The current month is partial.
Show as table
MonthIncidents
Nov 20260
Oct 20260
Sep 20260
Aug 20260
Jul 20260
Jun 20260
May 20260
Apr 20260
Mar 20260
Feb 20260
Jan 20260
Dec 20250

See the full timeline and the statistics