Lone hacktivist uses Claude against 42 European political groups
Anthropic's September 2026 threat report says a lone hacktivist used Claude in spring 2026 to build attack tooling. The targets were European political parties, media outlets, think tanks and their service providers. The actor got inside at least 14 of 42 tracked organizations, leaked data and set up doxxing lookups. Anthropic banned the accounts.
Damage
~140,000 records (incl. political opinions) taken from a campaign-management platform; 12–26 GB of database dumps overall; at least 14 organizations accessed
Sources
Anthropic. Evidence confidence: medium. This is the only primary source; victims are not named. Infrastructure was active 6 Feb–4 Jul 2026, so some activity may fall outside the window.
Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.
