Cathedral breached Anthropic's internal systems, leading to a dispute over the completeness of the disclosures.

Cathedral, founded by former members of the U.S. Department of Government Efficiency (DOGE), claims its AI agent breached Anthropic's internal systems within 12 hours, obtaining meeting minutes, payroll and hiring information, and Slack messages. Anthropic confirmed that Cathedral accessed parts of its sales, human resources, and IT systems, including customer and partner contact information and some basic user account records, but not Claude user conversations, source code, or model weights. This test was conducted under Anthropic's bug bounty program, and the intrusion was achieved using a vulnerability in third-party commercial software. Anthropic accuses Cathedral of failing to fully disclose its actions, violating the program's rules. (Source: The Washington Post)