Anthropic reveals industrial-scale Claude AI data extraction by Chinese labs

Anthropic has publicly disclosed details about a large-scale data extraction operation targeting Claude AI. According to a Reddit post analyzing the situation, this wasn't isolated research activity but an industrial-grade effort involving multiple Chinese AI companies.
The scale of the breach
The operation involved three specific players: DeepSeek, Moonshot AI, and MiniMax. These labs created over 24,000 fraudulent accounts to access Claude's API. Through these accounts, they scraped more than 16 million exchanges from Claude to train their own models.
Distinction between legitimate and illicit distillation
The source material clarifies the difference between standard industry practices and what occurred here:
- Standard distillation: Using a large model to train a smaller, more efficient version for commercial customers
- Illicit distillation: Described as "capability laundering" - siphoning safety guardrails and logic structures from American models and feeding them directly into foreign military, intelligence, and surveillance systems
Broader implications
Anthropic is warning that these attacks are becoming more sophisticated and frequent. The "honor system" of API usage appears insufficient to prevent such operations. The company is calling for coordinated defensive measures between major AI players and policymakers.
The situation highlights the vulnerability of model weights once they're exposed through API endpoints, even with existing safeguards in place.
📖 Read the full source: r/ClaudeAI
👀 See Also

Claude Code Plugin Bug Causes CPU Spikes and Battery Drain
A user discovered that Claude Code's Telegram plugin spawns multiple bun.exe processes that run at 100% CPU even with the laptop lid closed, causing rapid battery drain. The processes survive sleep/wake cycles and require specific cleanup steps to remove.

Claude's Conversation Search Tool Still Returns Deleted Chats
A Claude Pro user discovered that deleted conversations remain retrievable through Claude's conversation search tool, returning substantive content including titles, message counts, and excerpts despite the chat links being dead.

Claude Code source map leak reveals minified JavaScript was already public on npm
A source map file accidentally included in version 2.1.88 of the @anthropic-ai/claude-code npm package revealed internal developer comments, but the actual 13MB cli.js file containing 148,000+ plaintext strings has been publicly accessible on npm since launch.

AI Agent Exploits SQL Injection to Compromise McKinsey's Lilli Chatbot
Security researchers at CodeWall used an autonomous AI agent to hack McKinsey's internal Lilli chatbot, gaining full read-write access to its production database in two hours via an SQL injection vulnerability in unauthenticated API endpoints.