GTG-1002: state espionage campaign run mostly by Claude Code

The chain

The report, the responsible party’s response, the fix they claimed, whether anyone independent checked, and where it stands. A company saying it fixed something and evidence that the fix worked are different rows.

1. Reported Nov 13, 2025

   Anthropic self-reported (Nov 13, 2025) that a suspected Chinese state-sponsored group it calls GTG-1002 got Claude Code to do most of the work of a campaign against about 30 organizations by posing as a security firm and splitting tasks, with 'a small number of successful intrusions'; Anthropic's Jacob Klein told Axios as many as four breaches succeeded. Anthropic detected the activity in mid-September 2025. source

2. Response Nov 14, 2025

   Anthropic said it 'banned accounts as they were identified,' 'notified affected entities as appropriate' and 'coordinated with authorities.' The Chinese embassy said China 'firmly opposes and cracks down on all forms of cyberattacks' and 'We oppose groundless attacks and slanders against China.' Security researchers publicly doubted the report: Kevin Beaumont said 'The complete lack of IoCs again strongly suggests they don't want to be called out,' and Daniel Card called it 'marketing guff.' The House Homeland Security Committee scheduled a Dec 17, 2025 hearing with Anthropic's Logan Graham as a witness. source

3. Claimed fix Nov 13, 2025 partial

   'We have expanded our detection capabilities' and 'developed better classifiers to flag malicious activity,' plus account bans. No indicators of compromise were published with the report and no specific guardrail change was described. source

4. Independent check Sep 11, 2026 none

   No independent verification found: no victims have been named, no government has confirmed the intrusions, and critics' requests for indicators went unanswered. Anthropic's own September 2026 threat report says the operating model it documented in November 'has now proliferated across every class of actors we investigated,' including groups 'including GTG-10002' that 'developed and utilized their own autonomous attack frameworks,' and describes a Russian state (Midnight Blizzard) campaign that used Claude across attack stages from December 2025 to August 2026. source

5. Where it stands Sep 11, 2026 reopened

   The original claims remain disputed and unverified, and by Anthropic's own account the behavior - state actors running largely AI-automated intrusion campaigns through Claude - continued for at least nine more months despite the improved classifiers. source

What would change the verdict

Publication of indicators or a victim's confirmation would settle the facts; a sustained period with no new state-actor case in Anthropic's threat reports would be the only sign the fix works.