Startup Cathedral says AI agents breached Anthropic systems in under 12 hours
Cybersecurity startup Cathedral, founded by former DOGE staffers, says its AI agents got into Anthropic's internal systems. Anthropic confirmed limited access to some business systems.
Symbolic image · Photo: BalticServers.com / Wikimedia Commons, CC BY-SA 3.0 (cropped and resized)
Cathedral, a cybersecurity startup only a few months old, says its AI agents breached internal systems at artificial intelligence company Anthropic in less than 12 hours, according to a draft report reviewed by The Washington Post. The startup was founded by former staffers of the Department of Government Efficiency.
Anthropic confirmed the researchers reached a "limited set" of its sales, human resources and IT systems, including business contact information for customers and partners. It said Claude users' conversations, source code and model weights were not accessed. Cathedral's draft also cites meeting transcripts, salary data and Slack messages. Cathedral says it got in through flaws in third-party business software, an account Anthropic partly disputes.
Anthropic said Cathedral broke the rules of its vulnerability reward program by not disclosing the full extent of its activity.