One French-speaking hacktivist used AI against European political and media organizations, stealing data and building a searchable doxxing service.
Source: AnthropicDisclosure date comes from Anthropic’s newsroom. It does not date the underlying activity.
Scattered pages of personal information become easier to misuse when someone organizes them into a searchable directory.
Source: AnthropicOne French-speaking hacktivist used AI against European political and media organizations, stealing data and building a searchable doxxing service.
Source: AnthropicDoxxing makes identifying information easy to find or combine. Its consequences can extend beyond computer systems to the safety and privacy of real people.
Source: AnthropicScattered pages of personal information become easier to misuse when someone organizes them into a searchable directory.
An analogy for the mechanism; not an additional claim about the incident.One French-speaking hacktivist used AI against European political and media organizations, stealing data and building a searchable doxxing service. Anthropic
On September 11, Frontières president Erik Tegnér acknowledged a website incident but said the organization had found no evidence that subscriber or payment data was compromised. Erik Tegnér, president of Frontières
42 targets and at least 14 accessed are different counts.
Figures and attribution are the reporting provider’s assessment, not an independent audit.
The report covers December 2025–August 2026 overall. That window is not the start and end date of this individual case.
The Frontières statement concerns one organization. Anthropic does not name that target; its campaign-wide theft figures cannot be assigned to Frontières. The statement is an affected-party account, not an independent forensic finding.
Doxxing makes identifying information easy to find or combine. Its consequences can extend beyond computer systems to the safety and privacy of real people.
Anthropic reports disrupting abusive accounts. An account ban does not establish that the broader operation has ended. Anthropic
The reported theft fed a searchable doxxing service, connecting a systems incident to the privacy and safety of real people.
Restrict who and what can retrieve identifying information, separate sensitive collections, and review unusual bulk access or downloads.
Data already made public or copied elsewhere cannot be protected simply by changing permissions on the original system.
An incident response should identify whose information was exposed and coordinate technical containment with privacy, communications, and personal-safety support.
Technical containment may stop further access, but it cannot guarantee removal of copies or prevent every misuse of published information.
Editorial connections to relevant controls, not evidence that a particular technology would have prevented this case. Each guide links to the security guidance behind its recommendations.
Explore the full AI security frameworkExplore more original accounts in the source report library ↗.
These are source-reported findings. An independent assessment, when available, is labeled explicitly.
01Read this case’s update history →
Reviewed Sep 13, 2026 · Editorial methodology · Structured data