Cathedral used AI agents to breach Anthropic's internal systems
What happened
On 28 October 2026, security startup Cathedral was reported to have used AI agents, via third-party commercial software, to enter Anthropic's internal systems and reach meeting records, payroll data, recruitment information and Slack messages. Public reporting so far discloses only this intrusion route and the types of data involved; it has not yet mentioned Anthropic's response, when the incident was discovered or the scope of impact.
Written by AI from the reports · updated 2 h ago
Timeline
Follow the reports to see the event from each side.
- The DecoderSelectedAI agents hacked Anthropic, maker of arguably the most capable AI models for cyberdefense
Cybersecurity startup Cathedral used AI agents to break into Anthropic's internal systems through third-party software as part of a bug bounty program. Anthropic confirmed access to sales, HR, and IT data but disputes how deep the breach went. The incident shows how vulnerable even leading AI labs are through their external software dependencies.
Heat of this event
Not enough continuous observations yet to draw a trend.