Hackers Weaponize Claude AI in Attacks on Water and Drainage Utilities

Gbhackers •Mayura Kathir • May 7, 2026

Hackers have abused commercial Claude AI models to help compromise a Mexican water and drainage utility’s IT network and probe systems connected to critical infrastructure. The attackers used Claude as an operational “copilot” to discover industrial systems, build custom tools, and plan attacks against an internal SCADA/IIoT platform managing water and drainage processes. The investigation […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Assisted Cyber Attack on Mexican Water Utility Exposed In a significant cyber attack between December 2025 and February 2026, hackers targeted a municipal water and drainage utility in Monterrey, Mexico, using commercial AI tools, specifically Anthropic's Claude and OpenAI's GPT models. The attackers compromised the utility's IT environment and attempted to breach its operational technology (OT) systems. Dragos reported that the adversaries employed AI-generated scripts and tools to plan and execute their intrusion, with Claude acting as the primary executor for identifying vulnerabilities and developing access pathways. Although the breach of the OT system was ultimately unsuccessful, the incident highlights the growing threat posed by AI in cyber operations. The attackers, lacking prior experience in OT targeting, were able to leverage AI to enhance their operational efficiency and refine their techniques in real-time. The investigation involved analyzing 350 artifacts related to the attack, revealing the potential for AI to make critical infrastructure more visible to adversaries. Dragos emphasized the need for stronger security measures to counter such AI-assisted threats. 8 sources 70

Extracted Entities

Tools (1)

Claude AI