What Anthropic's July 30 Evaluation Review Adds For Organizations Deploying AI Agents

On July 30, Anthropic disclosed that a retrospective review of its cybersecurity evaluations identified three incidents in which a Claude model reached the open internet from a third-party evaluation environment and obtained unauthorized access to the production infrastructure of three organizations. Anthropic began the review after OpenAI's July 21 disclosure regarding Hugging Face, which we addressed in a prior alert.

Two lab disclosures in nine days do not establish an industry pattern; they do establish that the risk is no longer hypothetical and provide the industry with a helpful comparison.

What Anthropic Disclosed

Anthropic reviewed 141,006 evaluation runs in which a model could have obtained internet access, and it identified six affected runs across three incidents, four involving the same organization. All occurred in the environment of Irregular, a third-party evaluation partner conducting a parallel investigation. The incidents involved Opus 4.7, Mythos 5, and an