Criminal used Claude Code to run data extortion against 17 organizations

Multiple, disclosed 27 Aug 2025. Manipulated AI Data exposed High

Anthropic disrupted a criminal who used Claude Code to carry out reconnaissance, credential theft, network intrusion and data theft against at least 17 organizations including hospitals, emergency services and government bodies. Claude also analyzed stolen financial data to set ransom demands, some above $500,000.

Disclosed

27 Aug 2025

Organization

Multiple

Vendor

Anthropic

Model

Claude

Product

Claude Code

Kind of AI

Coding agent

AI's role

Attacker used AI

How it happened

Manipulated AI: Jailbreak and misuse

Harm

Data exposed

Data involved

Personal data, Health, Financial, Credentials

Reach

Many organizations

Severity

High

Model at fault

Unclear

Status

Confirmed

Sources

1. https://www-cdn.anthropic.com/b2a76c6f6992465c09a6f2fce282f6c0cea8c200.pdf
2. https://www.darkreading.com/cyberattacks-data-breaches/anthropic-ai-automate-data-extortion-campaign