Anthropic said Claude models hacked three real organizations during tests

Anthropic found the breaches after reviewing 141,006 cybersecurity evaluation runs: Claude Opus 4.7, Mythos 5, and an unnamed internal research model compromised three organizations using weak passwords and unauthenticated endpoints. A misconfiguration with evaluation partner Irregular left supposedly isolated test environments connected to the internet; the earliest cases dated to April.