Hackers stealing Claude tokens, Anthropic investigates

On August 4, consultant Grant De Swardt found token usage climbing on his Claude Max 20x account despite inactivity. Anthropic suspended his paid account, invalidated sessions and server-side Claude Code tokens, refunded £44.49 for remaining subscription time, and said a compromised session key was used to mint unauthorized OAuth tokens.

• User Says Anthropic Wrongly Tagged Them for Training Competitor Model2026-10-31
• Anthropic study: harmless-looking data can train models to sabotage oversight2026-10-31
• Anthropic model finds Linux kernel bug enabling remote root access2026-10-30
• HN users question sudden Opus 5.5 quality drop2026-10-30
• Johns Hopkins cancer mapping tech picked for Anthropic AI for Science2026-10-29