AI startup Cathedral breached Anthropic's internal systems in under 12 hours

AI startup hacks Anthropic, gains access to employee details, internal messages

During an authorized security test, cybersecurity startup Cathedral used AI agents to break into Anthropic's sales, HR and IT systems in under 12 hours, reaching employee records, salary details, job offers, meeting transcripts and Slack messages. Anthropic says its monitoring caught some activity and it cut off access the same day, and that Claude conversations, model weights and source code were never exposed. The findings, which circulated inside the US government, have stirred national security concerns.

This is a really hard problem, but Anthropic could have done a lot better.
  1. karussell

    Older discussion with original source (washington post)

    https://news.ycombinator.com/item?id=50241543

    MSN access: https://www.msn.com/en-us/news/other/it-took-just-12-hours-f...

  2. ArcHound

    That's not something you want to see before IPO. Wonder if it'll have an effect on the potential investors and thus the stock price. Also wonder if it then would have left-over effect on other AI stocks.

    My popcorn is ready, seems we're up for an interesting week or several.

  3. cassianoleal

    The headline is wrong. It should read:

    > AI startup's agent goes rogue, hacks Anthropic, ...

More from this day

2026-10-31