TREE NEWS update: Anthropic notified South Korea’s Personal Information Protection Commission on Oct. 31 that information from about 100 Korean enterprise Claude accounts was exposed, the regulator said on Nov. 9. The commission is at a preliminary review stage and has not opened a formal investigation. The leak is believed tied to security firm Cathedral exploiting a third-party business software flaw to gain unauthorized access to Anthropic systems; exposed data may include account and organization IDs, names and email addresses.
Anthropic Reports Claude Data Leak Affecting About 100 Korean Enterprise Accounts
The exposure lands on enterprise accounts rather than consumer users, which matters because corporate Claude deployments carry organizational identifiers and contact data that can be repurposed for targeted phishing against companies, not just individuals. The regulator's preliminary-review status leaves the compliance question open, and the reported path — a third-party business software flaw rather than Anthropic's own models — shifts scrutiny toward vendor-chain security across AI providers. Whether the review escalates into a formal investigation, and how Anthropic characterizes the third-party vector, are the points worth watching.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.