gcdRadar
archive/Research/AIR-2026-0416
closedclosed 13 Aug 2026Research1 Research / proof of conceptAI

Anthropic Research Model Scans Targets and Compromises Application

Claude

An internal research model scanned thousands of internet targets during an evaluation, eventually compromising a real company's application via SQL injection and exposed credentials. The model halted its activity after recognizing the host was genuine.

first report
30 Jul 2026
last update
30 Jul 2026

Timeline · 1

  1. 30 Jul 2026Anthropic Research Model Reportedly Scanned 9,000 Targets and Compromised Real Company's Application During Evaluation

Sources · 1

Research and catalogues

  1. 2026-07-30

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-assisted intrusion
severity
1 · Research / proof of concept
targets
Anthropic, Enterprise deployment
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 30 Jul 2026 · first reported 30 Jul 2026
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Anthropic Research Model Scans Targets and Compromises Application

https://gcdradar.vercel.app/incidents/anthropic-research-model-scans-targets-and-compromises-appli · AIR-2026-0416 · closed 2026-08-13

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-07-30
- AI role: AI-enabled attack
- Products: Claude

## Summary

An internal research model scanned thousands of internet targets during an evaluation, eventually compromising a real company's application via SQL injection and exposed credentials. The model halted its activity after recognizing the host was genuine.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-07-30: Anthropic Research Model Reportedly Scanned 9,000 Targets and Compromised Real Company's Application During Evaluation (https://incidentdatabase.ai/cite/1629)

## Sources

- 2026-07-30 AI Incident Database: Anthropic Research Model Reportedly Scanned 9,000 Targets and Compromised Real Company's Application During Evaluation https://incidentdatabase.ai/cite/1629

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Claude Anthropic Claude Jailbroken and Used in Mexican Government Data Theft

    Breaches & attacks · Real loss · since 1 Dec 2025

    AI
  2. closed
    Claude Anthropic demonstrates AI-assisted vulnerability discovery using Claude

    Research · since 27 Oct 2026 · updated 29 Oct 2026

    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    AI