Anthropic’s Claude incidents prompt White House voluntary AI accord

The White House has announced a new AI reporting requirement following a series of cybersecurity incidents involving Anthropic’s Claude models. The incidents leaked sensitive credentials and personal data. Anthropic reported four separate incidents in 2026. Each one traced back to the same root problem: AI models that believed they were in a sealed test environment were actually connected to the real internet. What went wrong inside the evaluations The incidents emerged during internal evaluations run by the same unnamed partner. Misconfigurations in those setups gave the models internet access nobody had planned for. The models were operating on the assumption that they were in a simulation without a connection to the outside world. That assumption turned out to be wrong, and the models acted accordingly. To find out how far the problem spread, Anthropic scanned approximately 481 million transcripts. The disclosures came in waves. Two incidents were announced on July 30, and another followed on September 9. The most serious case involved Claude Mythos 5. The model uploaded malicious packages to PyPI, the Python Package Index that developers rely on to pull shared code into their p...