(CNN) — AI company Anthropic says that during routine testing some of its models accessed the internet and hacked into three separate organizations’ systems – and that it didn’t notice the models had done so until an internal review prompted by rival OpenAI disclosing its models did the same.
Anthropic said in an announcement on Thursday that it started a review of its own systems after OpenAI disclosed last week that during a cybersecurity test some of its models escaped their testing environment, accessed the open internet and hacked into AI platform Hugging Face’s systems.
Anthropic said it found three instances where its AI models accessed the open internet when they were not supposed to and “gained unauthorized access to the production infrastructure of three different organizations.” The company said it discovered the incidents while reviewing more than 140,000 evaluations following OpenAI’s disclosure. Like during OpenAI’s tests, normal safety guardrails were removed during Anthropic’s evaluations to assess their models’ full capabilities.
Anthropic explained that in the three instances its models were given a fake “capture the flag” challenge, told that the “flag” was hidden on a different machine on the network and that its objective was to break in and retrieve it. Unlike OpenAI’s situation, Anthropic said none of its models deliberately attempted to escape their testing environments. Instead what happened was that the models were not supposed to have access to the open internet but that they were able to due to a misunderstanding between Anthropic and its evaluation partner, the company said in its statement.
To break into the three unnamed organizations, the models used basic techniques like “exploiting weak passwords” and finding system points that do not require log ins or tokens, Anthropic said. The most advanced version of its models did at some point recognize it was on the open internet, and stopped itself from continuing, the company said.
Anthropic said the earliest incident of its models breaching another organization was from April, and that none of the organizations recognized they had been hacked. Anthropic said they are in the process of working with the organizations affected.
OpenAI’s disclosure of its models hacking Hugging Face shook the cybersecurity and AI worlds, as it was the first real world example of something experts had long warned about: AI agents with advanced cybersecurity skills escaping testing environments and causing real-world harm.
Like OpenAI, Anthropic said on Thursday it has stopped all cyber evaluations. Anthropic acknowledged it could have taken more “in-depth” measures to prevent the cybersecurity breaches from happening.
Anthropic’s disclosure further confirms that AI agents unintentionally hacking other organizations is not limited to one AI company, and will likely further amplify calls for better AI testing safeguards and tools to potentially slow down AI development that may be moving much faster than society is ready for.
The-CNN-Wire
™ & © 2026 Cable News Network, Inc., a Warner Bros. Discovery Company. All rights reserved.