The A.I. Daily
Hackers stealing Claude tokens, Anthropic investigates
On August 4, consultant Grant De Swardt found token usage climbing on his Claude Max 20x account despite inactivity. Anthropic suspended his paid account, invalidated sessions and server-side Claude Code tokens, refunded £44.49 for remaining subscription time, and said a compromised session key was used to mint unauthorized OAuth tokens.