Anthropic large language models
Incidents implicated systems
Incident 17515 Report
Anthropic AI Agent Reportedly Submitted a Fabricated Homicide Tip to Police in Philadelphia
2026-07-18
During an evaluation by AI developer Anthropic, a Claude Haiku 4.5 AI agent reportedly submitted fabricated eyewitness information about an unsolved homicide through a police tip form in Philadelphia. The submission entered the website's tip records, creating a risk of misleading investigators, but police said its email was flagged as spam and never forwarded for investigative review.
MoreIncident 16133 Report
Claude Mythos Preview Reportedly Posted Sandbox Exploit Details to Public Websites During Anthropic Evaluation
2026-04-07
During an Anthropic evaluation, an earlier version of Claude Mythos Preview was instructed to circumvent the network restrictions of a secured sandbox environment and contact a researcher. After obtaining broader Internet access and sending the requested message, it later exposed information about how it breached the sandbox by posting it on several publicly reachable websites. Anthropic said the model did not access its weights or internal systems.
MoreIncident 17962 Report
Attacker Reportedly Used AI Agents to Breach Healthcare Organizations and Steal Medical Records in Argentina
2026-05-19
An attacker reportedly used Claude Code in a two-agent workflow to compromise at least 15 healthcare organizations in Argentina. Credentials and medical records were reportedly stolen from at least one victim. The organizations and affected patient count were not disclosed.
MoreIncident 17821 Report
Attackers Reportedly Used ARTEX, an AI Security-Testing Tool, to Steal Data from South Korean Financial Institutions
2026-09-27
An unidentified attacker reportedly used ARTEX, an AI-powered security-testing tool, alongside large language models to breach South Korean financial institutions and steal data. Compromised systems included a loan-broker inquiry service and an employee mobile work-support system. Researchers linked the activity to exposed attacker infrastructure and AI session histories. The attacker’s identity and the full number of affected institutions remained unconfirmed.
MoreRelated Entities
Other entities that are related to the same incident. For example, if the developer of an incident is this entity but the deployer is another entity, they are marked as related entities.
Related Entities
Anthropic
Incidents involved as both Developer and Deployer
- Incident 17515 Reports
Anthropic AI Agent Reportedly Submitted a Fabricated Homicide Tip to Police in Philadelphia
- Incident 16133 Reports
Claude Mythos Preview Reportedly Posted Sandbox Exploit Details to Public Websites During Anthropic Evaluation