Description: An attacker reportedly used Claude Code in a two-agent workflow to compromise at least 15 healthcare organizations in Argentina. Credentials and medical records were reportedly stolen from at least one victim. The organizations and affected patient count were not disclosed.
Entities
View all entitiesAlleged: Anthropic , AI agent system developers and Large language model developers developed an AI system deployed by Agentic threat actors , Threat actors , Cybercriminals and AI agent system deployers, which harmed Healthcare organizations in Argentina , Healthcare organizations , Patients , Information security and Privacy.
Alleged implicated AI systems: Claude Code , AI agent systems , AI penetration testing systems , Large language models and Anthropic large language models
Incident Stats
Incident ID
1796
Report Count
2
Incident Date
2026-05-19
Editors
Dummy Dummy
Incident Reports
Reports Timeline
Loading...
A new report from the CrowdStrike Counter Adversary Operations team details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared de…
Loading...
CrowdStrike identified a cyberattack campaign against Argentine healthcare institutions between May and August 2026. The investigation also detected activity in Brazil and Colombia. This finding is consistent with reports from other cyber i…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?