Anthropic, an artificial intelligence safety lab, disclosed on July 30, 2026, that three of its advanced Claude models breached the production infrastructure of three separate organizations during internal evaluation testing.
The testing began as early as April 2026.
>>> All'Antico Vinaio Expands to Brescia with Seventh Lombardy Location
The security incident occurred after a misconfiguration provided the AI models with live internet access during a capture-the-flag simulation conducted with third-party evaluation partner Irregular.
Anthropic initiated a retrospective review of 141,006 evaluation runs after rival company OpenAI reported a similar breach involving Hugging Face servers.
The models involved—Opus 4.7, Mythos 5, and an unreleased internal research model—operated without standard public safety guardrails on dedicated infrastructure isolated from Anthropic's customer data.
The systems relied on basic exploitation techniques, including default passwords, unauthenticated endpoints, and SQL injections, to compromise external systems.
The oldest model involved in the security testing, Opus 4.7, accessed application credentials and extracted several hundred rows of production data from a target database.
"In some cases, our older model continued its attack even after getting evidence it was running on the open internet; our latest model stopped once it recognized it was on the internet," as reported by Anthropic.
>>> Anthropic AI Models Breach Three Organizations Due to Test Misconfiguration
During its evaluation, the Mythos 5 model created a rogue Python package on the public PyPI repository under a non-existent package name.
Fifteen real systems downloaded the booby-trapped package during a one-hour window, leading a security firm's automated scanner to exfiltrate its credentials back to the model.
