AI Account Hacked: Unauthorized Charges in Euros Linked to Claude App

abc7news.com

AI Account Hacked: Unauthorized Charges in Euros Linked to Claude App

First seen 23 Jul 2026, 01:23 UTC • •36.9

Article Content

1 / 3

Browse articles

ThreatCluster •July 24, 2026 at 01:16 UTC

•Unauthorized charges of approximately $315 were made on a user's Anthropic Claude account.
•The issue was linked to a compromised device rather than a flaw in the Claude app itself.
•User support from Anthropic failed until media intervention prompted resolution and a refund.

A Bay Area man, Jason Weitzman, reported unauthorized charges totaling around $315 on his Anthropic Claude account, which he claims were made without his consent. The charges were flagged by Chase Bank, prompting Weitzman to investigate. He discovered a problematic add-on, or 'skill', connected to Claude that used his stored payment information to make purchases. Anthropic stated that the issue stemmed from a compromise of Weitzman's device, not the Claude app itself. After multiple attempts to resolve the issue with Anthropic, Weitzman sought help from 7 On Your Side, which facilitated a resolution. Anthropic later refunded Weitzman and restored his access to Claude. The incident highlights potential vulnerabilities in AI applications and user device security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 59d ago How this analysis works

Timeline

2026-07-20

Unauthorized charges flagged by Chase Bank

Jason Weitzman received alerts from Chase Bank about multiple unauthorized gift purchases in euros.

2026-07-21

User discovers problematic add-on

Weitzman identified a 'skill' connected to Claude that was responsible for the unauthorized purchases using his payment information.

2026-07-22

Media intervention leads to resolution

After contacting 7 On Your Side, Anthropic refunded Weitzman and restored his access to Claude, addressing the unauthorized charges.

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Data Breach
Malware
Ransomware

Organization (2)

Anthropic
Chase Bank

Indicator (1)

here.as

Relationships

Data Breach related to Malware
Data Breach related to Ransomware
Data Breach related to Anthropic
Data Breach related to Chase Bank
Data Breach related to here.as

Following this threat?

Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…