Here’s yet another troubling story about this “golden” era of AI. A hacker has exploited Anthropic’s Claude chatbot to carry out attacks against Mexican government agencies, according to a report by Bloomberg. This resulted in the theft of 150GB of official government data, including taxpayer records, employee credentials and more.

The hacker used Claude to find vulnerabilities in government networks and to write scripts to exploit them. It also tasked the chatbot with finding ways to automate data theft, as indicated by cybersecurity company Gambit Security. This started in December and continued for around a month.

It looks like the hacker was able to essentially jailbreak Claude with prompts, finally bypassing the chatbot’s guardrails. Claude originally refused the nefarious demands until eventually relenting.

“In total, it produced thousands of detailed reports that included ready-to-execute plans, telling the human operator exactly which internal targets to attack next and what credentials to use,” said Curtis Simpson, Gambit Security’s chief strategy officer.

Anthropic has investigated the claims, disrupted the activity and banned all of the accounts involved, according to a company representative. The spokesperson also said that its latest model, Claude Opus 4.6, includes tools to disrupt this kind of misuse.

It’s also been reported that this hacker used ChatGPT to supplement the attacks, using OpenAI’s chatbot to gather information on how to move through computer networks, determine which credentials were needed to access systems and how to avoid detection. OpenAI says it has identified attempts by the hacker to violate its usage policies and that the tools refused to comply.

The hacker remains unidentified. The attacks haven’t been attributed to a specific group, but Gambit Security did suggest they could be tied to a foreign government. It’s also unclear what the hacker wants to do with all of that data.

Mexico’s national digital agency hasn’t commented on the breach, but did note that cybersecurity is a priority. The state government of Jalisco denies that it was breached, saying only federal networks were impacted. However, Mexico’s national electoral institute also denied any breaches or unauthorized access in recent months. It’s worth noting that Gambit found at least 20 security vulnerabilities during its research that the country is likely not keen on highlighting.

This isn’t the first time Claude has been used for a major cyberattack. Last year, hackers in China manipulated the tool into attempting to infiltrate dozens of global targets, several of which were successful. Anthropic just nixed its long-standing safety pledge, which committed to never train an AI system unless it could guarantee in advance that safety measures were adequate. So who knows what fresh hell the future will bring as the company’s tools become more advanced.

This article originally appeared on Engadget at https://www.engadget.com/ai/hacker-used-anthropics-claude-chatbot-to-attack-multiple-government-agencies-in-mexico-171237255.html?src=rss

An anonymous reader shares a report: Japan’s Fair Trade Commission raided Microsoft Japan’s offices on Wednesday as part of an investigation into whether it improperly restricted customers of its Azure platform from using rival cloud services, a source with direct knowledge of the matter told Reuters.

The source said Japan’s antitrust authorities would also be seeking clarification from Microsoft’s parent company in the United States. Microsoft Japan is suspected of setting conditions that effectively shut out other services by limiting access to popular services on other cloud platforms, the source said.

Read more of this story at Slashdot.

Casey Means, President Trump’s nominee for surgeon general, will appear before the Senate Health Committee on Wednesday and is likely to face scrutiny over her qualifications for becoming the country’s top doctor.

Though Means holds a medical degree from Stanford Medical School, she dropped out of her medical residency and holds no active medical license. Instead, she has pursued a career as a wellness influencer, embracing “functional” medicine, an ill-defined form of alternative medicine. She co-founded a company called Levels, which promotes intensive health tracking, including the use of continuous glucose monitoring for people without diabetes or prediabetes, which is not backed by evidence.

Last year, an analysis by The Washington Post found that Means earned over half a million dollars between 2024 and 2025 from making deals with companies described as selling “diagnostic testing,” “herbal remedies and wellness products,” and “teas, supplements, and elixirs.”

Read full article

Comments