Hacker Used Anthropic's Claude To Steal Sensitive Mexican Data
Source: Slashdot
Incident Summary
A hacker exploited Anthropic’s AI chatbot Claude to carry out a series of attacks against Mexican government agencies, resulting in the theft of a huge trove of sensitive tax and voter information1.
The unknown Claude user wrote Spanish‑language prompts for the chatbot to act as an elite hacker, finding vulnerabilities in government networks, writing computer scripts to exploit them, and determining ways to automate data theft, Israeli cybersecurity startup Gambit Security said in research published Wednesday.
The activity started in December and continued for roughly a month. In total, about 150 GB of Mexican government data was stolen, including documents related to 195 million taxpayer records, voter records, government employee credentials, and civil registry files, according to the researchers.