AI Agents Found a Way Into Anthropic's Business Systems in Under 12 Hours

In brief

• Cathedral says AI agents found paths into Anthropic's internal systems in less than 12 hours by exploiting weaknesses in third-party administrative and sales software.
• Anthropic confirmed access to a limited set of sales, HR and IT systems, but says customer conversations, Claude responses, source code and model weights were not reached.
• Anthropic says Cathedral overstated the national security implications and did not disclose all of its testing; Cathedral says it kept data access to the absolute minimum.

Researchers at a cybersecurity startup said AI agents found paths into Anthropic's business systems in less than 12 hours, according to a Washington Post report published Monday.

The way in was not Claude, Anthropic's AI assistant, but third-party administrative and sales software, the kind of programs companies use to track customers and manage staff. Many other companies use the same software.

The startup, Cathedral, was founded months ago by four former staffers of the Department of Government Efficiency, the Donald Trump administration's cost-cutting team better known as DOGE. The startup raised $160 million at a $1.4 billion valuation in July.

Cathedral tested Anthropic through a program that works like a bug bounty, in which a company rewards outside experts for reporting flaws instead of exploiting them. Its AI agents, which carry out multi-step tasks without a person approving each move, found routes to meeting transcripts, salary and job-offer details, and Slack messages about Anthropic's advanced models, per a draft of its report.