Claude Code Espionage Incident (2025)

{
  "id": "claude-code-espionage-2025",
  "numericId": "E605",
  "path": "/knowledge-base/incidents/claude-code-espionage-2025/",
  "filePath": "knowledge-base/incidents/claude-code-espionage-2025.mdx",
  "title": "Claude Code Espionage Incident (2025)",
  "quality": 63,
  "readerImportance": 46,
  "researchImportance": 63,
  "tacticalValue": null,
  "contentFormat": "article",
  "tractability": null,
  "neglectedness": null,
  "uncertainty": null,
  "causalLevel": null,
  "lastUpdated": "2026-03-13",
  "dateCreated": "2026-02-15",
  "llmSummary": "Documents a September 2025 incident where attackers used Claude Code for cyber espionage against ~30 organizations. Anthropic framed it as the first \"AI-orchestrated\" cyberattack, but whether this represents a qualitative shift or faster execution of conventional patterns is debated. Raises questions about AI misuse, jailbreaking via deception, and Anthropic's incentives in disclosure.",
  "description": "A September 2025 cyber espionage campaign in which attackers used Anthropic's Claude Code against ~30 organizations. Anthropic characterized it as the first \"AI-orchestrated\" cyberattack, though the significance of this framing is debated.",
  "ratings": {
    "novelty": 7,
    "rigor": 6,
    "actionability": 5,
    "completeness": 7
  },
  "category": "incidents",
  "subcategory": null,
  "clusters": [
    "ai-safety",
    "cyber",
    "governance"
  ],
  "metrics": {
    "wordCount": 3194,
    "tableCount": 2,
    "diagramCount": 0,
    "internalLinks": 4,
    "externalLinks": 2,
    "footnoteCount": 0,
    "bulletRatio": 0.28,
    "sectionCount": 26,
    "hasOverview": true,
    "structuralScore": 12
  },
  "suggestedQuality": 80,
  "updateFrequency": 21,
  "evergreen": true,
  "wordCount": 3194,
  "unconvertedLinks": [
    {
      "text": "anthropic.com",
      "url": "https://www.anthropic.com/news/detecting-countering-misuse-aug-2025",
      "resourceId": "fdcaadbbe674abde",
      "resourceTitle": "Detecting and countering misuse of AI: August 2025"
    }
  ],
  "unconvertedLinkCount": 1,
  "convertedLinkCount": 0,
  "backlinkCount": 2,
  "citationHealth": {
    "total": 59,
    "withQuotes": 49,
    "verified": 47,
    "accuracyChecked": 47,
    "accurate": 35,
    "inaccurate": 2,
    "avgScore": 0.9618902267241964
  },
  "hallucinationRisk": {
    "level": "medium",
    "score": 55,
    "factors": [
      "no-citations"
    ]
  },
  "redundancy": {
    "maxSimilarity": 19,
    "similarPages": [
      {
        "id": "cyberweapons",
        "title": "Cyberweapons",
        "path": "/knowledge-base/risks/cyberweapons/",
        "similarity": 19
      },
      {
        "id": "agentic-ai",
        "title": "Agentic AI",
        "path": "/knowledge-base/capabilities/agentic-ai/",
        "similarity": 18
      },
      {
        "id": "tool-use",
        "title": "Tool Use and Computer Use",
        "path": "/knowledge-base/capabilities/tool-use/",
        "similarity": 17
      },
      {
        "id": "frontier-model-forum",
        "title": "Frontier Model Forum",
        "path": "/knowledge-base/organizations/frontier-model-forum/",
        "similarity": 17
      },
      {
        "id": "metr",
        "title": "METR",
        "path": "/knowledge-base/organizations/metr/",
        "similarity": 17
      }
    ]
  },
  "coverage": {
    "passing": 6,
    "total": 13,
    "targets": {
      "tables": 13,
      "diagrams": 1,
      "internalLinks": 26,
      "externalLinks": 16,
      "footnotes": 10,
      "references": 10
    },
    "actuals": {
      "tables": 2,
      "diagrams": 0,
      "internalLinks": 4,
      "externalLinks": 2,
      "footnotes": 0,
      "references": 13,
      "quotesWithQuotes": 49,
      "quotesTotal": 59,
      "accuracyChecked": 47,
      "accuracyTotal": 59
    },
    "items": {
      "llmSummary": "green",
      "schedule": "green",
      "entity": "red",
      "editHistory": "red",
      "overview": "green",
      "tables": "amber",
      "diagrams": "red",
      "internalLinks": "amber",
      "externalLinks": "amber",
      "footnotes": "red",
      "references": "green",
      "quotes": "green",
      "accuracy": "green"
    },
    "ratingsString": "N:7 R:6 A:5 C:7"
  },
  "readerRank": 330,
  "researchRank": 201,
  "recommendedScore": 170.83
}

No external links