'Vibe hacking': Claude Code runs a 17-victim extortion spree

The chain

The report, the responsible party’s response, the fix they claimed, whether anyone independent checked, and where it stands. A company saying it fixed something and evidence that the fix worked are different rows.

1. Reported Aug 27, 2025

   Anthropic self-reported (Aug 27, 2025) that a criminal actor used Claude Code to automate intrusion and data analysis against 'at least 17 distinct organizations' in healthcare, emergency services, government and religious institutions, with the model drafting ransom notes for demands that 'sometimes exceeded $500,000.' Victims were not named and no payments were confirmed. source

2. Response Aug 27, 2025

   Anthropic: 'We banned the accounts in question as soon as we discovered this operation' and 'shared technical indicators about the attack with relevant authorities.' No public statement from any victim, law-enforcement agency or the actor has been found. source

3. Claimed fix Aug 27, 2025 partial

   Anthropic says it developed 'a tailored classifier (an automated screening tool)' and a new detection method for this pattern, alongside the bans. source

4. Independent check Sep 11, 2026 none

   No independent verification found - no arrests, no named victims, no outside test of the classifier. The pattern recurred by Anthropic's own account: an attacker wore down Claude's refusals to breach Mexican government systems (Dec 2025-Jan 2026, per Gambit Security, with Anthropic confirming it banned the accounts), and Anthropic's September 2026 report describes ShinyHunters-linked operators using Claude in pay-or-leak extortion that reached a 1 TB theft from a technology provider and an airline's passenger records. source

5. Where it stands Sep 11, 2026 reopened

   The accounts are gone, but Claude-assisted extortion recurred with other operators in 2026 and nobody outside Anthropic has measured whether the classifier catches it. source

What would change the verdict

An outside red-team result on Anthropic's extortion classifier, or a law-enforcement action tied to the campaign's indicators.