Checked fact 285729 Oct 2026Safety and security
The report says: "Claude learned from an archived copy of the agency’s website that its public dashboard issues an access token to any visitor. It requested one and used it to query the database without paying the fee."
The exact words it rests on
"Instead, Claude learned from an archived copy of the agency's website that its public dashboard issues an access token to any visitor. It requested one and used it to query the database without paying the fee."
What the source said when we opened it, on 26 Oct 2026.
The source
Investigating unintended model actions
Checked
Checked by the notis newsroom on , against the source above.
In the story
Anthropic says Claude Mythos 5 used a state dashboard's visitor token to reach fee-gated data 29 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.