Claude Security Incidents and Breaches
Anthropic develops the Claude models and products, including the Claude Code agent.
- Incidents on this page
- 3
- Confirmed by a primary document (E1)
- 3
- Verified losses
- None yetNo record here has a verified loss figure
- Latest disclosure
- 2025
About these records
This hub lists real incidents involving Anthropic's Claude models and tools, whether attackers used them or attacked them. Many of the records come from Anthropic's own threat reports, so the records state that the assessment is the vendor's and give the share of the work the company attributes to the AI.
The registry holds 3 records that involve Claude. All of them are confirmed in a primary document (evidence level E1). AI was the weapon in 3. 1 is rated severe or critical on the five-point scale. The latest was disclosed on 13 November 2025.
Records
Newest by date of occurrence.
| Record | Occurred | Incident | AI role | Severity |
|---|---|---|---|---|
| AHL-2025-0001 | Sep 2025 | GTG-1002: Claude Code used to run a state espionage campaign | Weapon | 4 |
| AHL-2025-0003 | 24 Aug 2025 to 27 Aug 2025 | s1ngularity: hijacked Nx packages made AI CLIs hunt secrets | Weapon | 2 |
| AHL-2025-0002 | 2025 | GTG-2002: Claude Code used for data theft and extortion | Weapon | 3 |
By month
By month of occurrence. Records dated only by year are not shown.
Show as table
| Month | Incidents |
|---|---|
| Nov 2026 | 0 |
| Oct 2026 | 0 |
| Sep 2026 | 0 |
| Aug 2026 | 0 |
| Jul 2026 | 0 |
| Jun 2026 | 0 |
| May 2026 | 0 |
| Apr 2026 | 0 |
| Mar 2026 | 0 |
| Feb 2026 | 0 |
| Jan 2026 | 0 |
| Dec 2025 | 0 |
| Nov 2025 | 0 |
| Oct 2025 | 0 |
| Sep 2025 | 1 |
| Aug 2025 | 1 |