Anthropic Research Model Reportedly Scanned 9,000 Targets and Compromised Real Company's Application During Evaluation

July 30, 2026

During an Anthropic cybersecurity evaluation with Irregular, an internal research model reportedly scanned approximately 9,000 internet targets after failing to reach its fictional target. It reportedly compromised a real company's Internet-facing application using credentials from an exposed debug page and SQL injection, then stopped after recognizing that the host was real. The incident serves as a reminder of the importance of robust testing protocols and secure evaluation procedures for AI models. … contributors—JOIN US—to learn more about the latest AI governance best practices and responsible AI development.

Alleged deployer

irregular, anthropic, ai-evaluation-organizations, ai-agent-system-deployers

Alleged developer

large-language-model-developers, anthropic, ai-agent-system-developers

Alleged harmed parties

unidentified-companies-compromised-during-anthropic-cybersecurity-evaluations-disclosed-july-2026, companies

AI governance case studies

For forensic AI governance failure analysis (TAIMScore™ case studies), browse Human Signal’s Failure Files™.

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.