China-Based AI Companies Conduct Distillation Campaigns Against U.S. AI Models
Six China-based artificial intelligence companies conducted industrial-scale distillation campaigns against United States AI providers. The actors used fraudulent accounts and gray-market services to collect outputs over millions of exchanges for model improvement.
why this severityConfirmed large-scale extraction campaign across multiple U.S. AI providers.
- first report
- 9 Oct 2026
- last update
- 9 Oct 2026
Timeline · 2
Sources · 2
Advisories and databases
- 2026-10-09China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI CompaniesCISA · cisa.gov/news-events/cybersecurity-advisories/aa26-251a
Research and catalogues
- 2026-10-09China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI CompaniesMITRE ATLAS · atlas.mitre.org/studies/AML.CS0076
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Model theft / extraction
- severity
- 3 · Confirmed exploitation
- targets
- OpenAI, Anthropic, Google, Microsoft
- owasp llm top 10
- LLM10:2025 Unbounded Consumption
- dates
- happened 2024 (approx.) · first reported 9 Oct 2026
- origin
- MITRE ATLASDerived from MITRE ATLAS (Apache 2.0, © MITRE).
- record
- confidence 0.90 · created 2026-11-12 02:00Z · updated 2026-11-12 02:00Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# China-Based AI Companies Conduct Distillation Campaigns Against U.S. AI Models https://gcdradar.vercel.app/incidents/china-based-ai-companies-conduct-distillation-campaigns-agai · AIR-2026-1916 · closed 2026-10-23 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed large-scale extraction campaign across multiple U.S. AI providers. - Fix status: No fix needed - First reported: 2026-10-09 (happened 2024) - AI role: Attack on AI ## Summary Six China-based artificial intelligence companies conducted industrial-scale distillation campaigns against United States AI providers. The actors used fraudulent accounts and gray-market services to collect outputs over millions of exchanges for model improvement. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-10-09: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies (https://cisa.gov/news-events/cybersecurity-advisories/aa26-251a) - 2026-10-09: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies (https://atlas.mitre.org/studies/AML.CS0076) ## Sources - 2026-10-09 MITRE ATLAS: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://atlas.mitre.org/studies/AML.CS0076 - 2026-10-09 CISA: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://cisa.gov/news-events/cybersecurity-advisories/aa26-251a Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveGoogle Workspace Fake OpenAI and SpaceX events used in multi-platform phishing campaign
Breaches & attacks · Exploited · since 5 Nov 2026
AI - closedCursor Researchers bypass browser security in AI coding assistants
Research · since 29 Oct 2026
AI - closedOpenAI API Flaw in OpenAI Compaction Process Enables Reasoning Extraction
Research · since 26 Oct 2026 · updated 27 Oct 2026
AI - closedClaude Coordinated Distillation Attack Targets Claude Capabilities
Research · since 20 Oct 2026
AI - closedOpenCode Console OpenCode Console Breach Exposes Third-Party AI Provider API Keys
Breaches & attacks · Exploited · since 16 Oct 2026
AI - closedChrome Anthropic AI Model Chains Flaws Into Working Exploits in Lab Research
Research · since 28 Oct 2026
AI