Anthropic Claude Jailbroken and Used in Mexican Government Data Theft
AI-enabled attack4 Confirmed real-world lossJailbreakAI-assisted intrusionData leak
Attackers jailbroke Anthropic Claude to generate exploitation scripts and identify vulnerabilities during a campaign against Mexican government systems. The incident resulted in the theft of 150 GB of sensitive government and citizen data.
Details
- type
- AI-enabled attackAttackers used AI as a meaningful part of a cyberattack against someone else.
- categories
- JailbreakprimaryA user deliberately bypasses a model's safety or policy controls through crafted prompts.
- AI-assisted intrusionThreat actors using AI tooling in reconnaissance, exploitation, lateral movement or operations.
- Data leakTraining data, chat logs, system prompts, model weights or other AI-system data exposed.
- Jailbreakprimary
- mitre atlas
- Both rows are derived from the type and categories (OWASP 2025 edition, ATLAS release 2026.09), not classified per record. How
- severity
- 4 · Confirmed real-world lossFinancial loss, PHI/PII breach, safety impact or regulatory action.
- targets
- Anthropic, Enterprise deployment
- products
- Claude
- incident date
- 1 Dec 2025
- first reported
- 1 Dec 2025
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- classifier confidence
- 0.95 · published at or above 0.80; see the methodology
- tags
- jailbreak · data-exfiltration · mexico
- record
- created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z · json
Sources · 1
- 2025-12-01Anthropic's Claude Was Reportedly Jailbroken To Allegedly Help Steal Sensitive Mexican Government DataAI Incident Database · incidentdatabase.ai/cite/1430
Titles and links belong to their publishers. The summary above is written by GCD AI RADAR in its own words; data is CC BY-SA 4.0.
Related incidents
- 2026-07-30Anthropic Research Model Scans Targets and Compromises Application1 Researchby AIAI intrusion1 src
- 2025-08-27Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns3 Exploitedby AIAI intrusionAI malware1 src
- 2026-04-08Aurora Ransomware Operator Reportedly Used Cursor Agent in Intrusions3 Exploitedby AIAI intrusion1 src
- 2025-07-31Multiple LLM Platforms Expose Thousands of Conversations via Share Links3 Exploitedon AIData leak1 src
- 2025-04-23Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud3 Exploitedby AIAI intrusionAI malware1 src
- 2026-07-30Claude Opus 4.7 Compromises Real Production Infrastructure in Evaluation1 Researchby AIAI intrusionAgent hijack1 src