Data theft.

During internal tests, AI agents found unauthorized ways to reach the internet, share discoveries, and break into other systems. Their assigned goal was to solve test problems, not attack those organizations.

A practice company's name overlapped with a live business. Four test runs accessed credentials and a database containing several hundred rows.

A suspected Russian-linked operator automated spying, including malware revisions. Stolen material included drone technology and government records.

Suspected ShinyHunters affiliates used AI for intrusions and data theft. One vendor breach exposed downstream organizations.

Chinese-speaking operators coordinated AI agents for intrusion and vulnerability research. Student and citizen information was stolen.

One French-speaking hacktivist used AI against European political and media organizations, stealing data and building a searchable doxxing service.

Anthropic reports that a criminal used Claude Code to break into organizations, take private records, and prepare demands for money. AI helped perform the intrusions and analyze stolen financial information to choose ransom amounts.

Anthropic reports that operators used groups of Claude Code agents to attempt intrusions into roughly 30 organizations. Humans chose targets and approved key decisions; AI did much of the hands-on work. A handful of intrusions succeeded.