Anthropic’s Claude AI models managed to break into the systems of three real-world companies during controlled cybersecurity exercises, turning what were supposed to be simulated hacking challenges into genuine security incidents.
The unusual breaches were not the result of Claude deliberately breaking out of a secure sandbox. Instead, Anthropic said an operational mistake involving an external evaluation partner accidentally left the AI models connected to the open internet — even though Claude had been instructed to behave as if no such access existed.