Anthropic's 'Claude' Suffers Personal Data Breach… 100 Domestic Corporate Accounts Affected

Information from approximately 100 domestic corporate accounts using the generative artificial intelligence (AI) service 'Claude' by U.S.-based Anthropic has been leaked, it was revealed.

According to the Personal Information Protection Commission on the 9th, Anthropic reported on the 31st of last month that information from approximately 100 domestic corporate accounts had been leaked externally.

The Personal Information Protection Commission is in the preliminary review stage for this matter and has not yet launched a formal investigation. It was explained that, unlike domestic businesses, overseas companies often go through a document request procedure before an investigation begins, which takes time.

It is suggested that this breach may have occurred when an external security firm accessed Anthropic's internal systems, exposing account information.

Previously, The Washington Post (WP) reported on the 26th of last month (local time) that U.S. security startup 'Cathedral' had accessed Anthropic's internal systems by exploiting vulnerabilities in external business software.

At the time, it was reported that Anthropic sent a notice to some customers stating that there was a possibility that corporate Claude account details, organization identification numbers, names, and email addresses had been exposed.

Lydia Halli, an Anthropic technical researcher, stated on her X account on the 8th regarding this matter, "Cathedral gained unauthorized access to account information such as names, emails, and billing plans, but did not access prompts, outputs, or payment information."