South Korean regulators say Anthropic has reported a Claude data breach involving about 100 enterprise accounts.

AT A GLANCE

Anthropic reported a Claude data leak to South Korea, involving approximately 100 South Korean corporate accounts; regulators have not yet formally investigated.

Article

Anthropic Reports Claude Data Breach to South Korea, Involving Approximately 100 Enterprise Accounts

PANews, November 9 — According to Yonhap News Agency, South Korea's Personal Information Protection Commission stated today that Anthropic reported to it on October 31 that information from approximately 100 South Korean enterprise Claude accounts had been leaked. The commission is currently in the preliminary review stage and has not yet formally launched an investigation. The breach is believed to be related to security company Cathedral's unauthorized access to Anthropic's internal systems by exploiting a vulnerability in third-party business software. Potentially exposed information includes account and organization identification numbers, names, and email addresses. Anthropic employee Lydia Hallie posted on X on November 8, stating that Cathedral accessed account information such as names, email addresses, and subscription plans, but did not access prompts, output content, or payment information. The company cut off the affected systems on the day of discovery and worked with the vendor to fix the vulnerability.

Key points

South Korea's Personal Information Protection Commission stated that Anthropic reported on October 31 the information leakage of approximately 100 Korean enterprise Claude accounts.
The Personal Information Protection Commission of South Korea is currently in the pre-review stage and has not yet officially launched an investigation.
The leak is believed to be related to Cathedral exploiting a vulnerability in third-party business software to gain unauthorized access to Anthropic's internal systems.
The information that may have been exposed includes account and organization identification numbers, names, email addresses, etc.
Anthropic employee Lydia Hallie stated that Cathedral accessed account information such as names, email addresses, and subscription plans, but did not touch prompts, output content, or payment information.
Anthropic said it disconnected the affected systems on the day of discovery and worked with vendors to fix the vulnerability.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This is an account information exposure incident that is still under review. Current information indicates that basic profile data of some enterprise accounts may have been accessed, but prompts, outputs, and payment information are reportedly untouched.

Why it matters to readers

Affected enterprises may need to watch whether account information, organization identification numbers, names, email addresses, and subscription plans have been exposed; whether regulators will launch a formal investigation is also not yet determined.

If you use the enterprise version of Claude, you should pay attention to notices from Anthropic or related companies, and stay informed about account security and subsequent regulatory outcomes.

Risks and unknowns

It remains to be confirmed whether actual information leaks occurred for approximately ["100"] accounts.
The actual scope of the exposed data remains to be verified by regulators.
Whether Cathedral accessed Anthropic systems through vulnerabilities in third-party business software remains to be investigated and confirmed.
The Personal Information Protection Commission of South Korea has not yet officially launched an investigation.

South Korean regulators say Anthropic has reported a Claude data breach involving about 100 enterprise accounts.

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center