Cathedral Startup Claims Breach of Anthropic's Internal Systems
Article Content
- •Cathedral claims to have breached Anthropic's internal systems in under 12 hours.
- •Sensitive data accessed includes meeting transcripts, salaries, and Slack messages.
- •Anthropic confirmed limited access but denied any breach of user conversations or source code.
Cathedral, a new cybersecurity startup founded by former DOGE staff, claims it breached Anthropic's internal systems, accessing sensitive data including meeting transcripts and salaries. The breach was reportedly achieved by exploiting vulnerabilities in third-party software, taking less than 12 hours to find access points. Anthropic confirmed that Cathedral accessed a limited set of its systems, including HR and IT data, but denied that any user conversations or source code were compromised. The hack was part of a cybersecurity testing program, but Anthropic accused Cathedral of violating its rules by not fully disclosing the extent of their activities. The incident has raised national security concerns, particularly regarding the potential for similar vulnerabilities to be exploited by state actors. Cathedral has been valued at $1.4 billion and received significant investment from major firms. The incident highlights ongoing vulnerabilities in enterprise software, particularly in the context of AI-driven operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What data was accessed during the breach?
Did Anthropic confirm any user data was compromised?
What are the implications of this breach?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…