Anthropic confirmed that its core AI model weights, source code, and user conversations were not compromised during a recent penetration of its internal networks. The company disputed reports that the breach occurred in under 12 hours, stating that researchers from the startup Cathedral spent several days attempting to gain entry before exploiting vulnerabilities in two third-party software services.
The breach, which provided access to some of Anthropic’s HR, sales, and IT systems, coincided with the company’s filing for an initial public offering. Cathedral was founded by former staffers of the Department of Government Efficiency, and while Anthropic expressed gratitude for the findings, it stated that the activities were outside the scope of its bug bounty program’s safe harbor policy.
