Anthropic: Hackers used Claude to scan 1.8 million Android apps
Hackers exploited the AI model Claude to scan 1.8 million Android apps for hardcoded secrets. Anthropic has terminated the accounts and strengthened its security safeguards.
What happened?
Between December 2025 and August 2026, Anthropic documented several instances where threat actors attempted to misuse the AI model Claude. One of the discovered attacks involved an actor creating an automated process via Claude to scan 1.8 million Android apps (APK files) for hardcoded secrets. Anthropic has terminated the associated accounts and adjusted the model's protection mechanisms.
Key facts
| Antal skannade Android-appar | 1,8 miljoner APK-filer |
|---|---|
| Tidsperiod för granskningen | December 2025 – augusti 2026 |
| Identifierade hotgrupper | ShinyHunters, Ryssland- och Kina-kopplade grupper |
Why it matters
The report shows that both financially motivated hackers and state-sponsored espionage groups are actively attempting to use AI models such as Claude for malicious purposes, including scanning for secrets, cyber and influence operations, surveillance, and fraud.
Who is affected?
The incident concerns Anthropic, as well as users and developers of the 1.8 million Android apps that were scanned by the threat actors. The identified threat groups, including ShinyHunters and Russian and Chinese groups, are also involved as their accounts were terminated.
Impact on the EU
The source provides no specific details regarding the EU region or EU-specific regulations for this incident.
What else you should know
Among the actors identified and suspended were the well-known criminal collective ShinyHunters and state-linked actors from Russia and China.
Quick answers about this story
Vad har hänt?
När hände det?
Varför spelar det roll?
The link opens in a new window and leads to the publisher's own site.
Källan har spårats automatiskt från utgivaren via Aheadlines signalkedja.
AI-verktyg i artikeln
Topics
Get similar news straight to your inbox
The reader's room
Send in a question or an addition. The newsroom reads everything before it's published and replies when relevant. No AI-generated text – just people.
Sign in to submit a comment or question.
Read the article through your role
- Decide whether this affects strategy over 6–12 months or is just noise.
- Discuss with leadership: do we own the right question or does ownership need to move?
- Ask: what risk are we taking by NOT acting on this this quarter?
Generated angle — not editorial analysis of "Anthropic: Hackers used Claude to scan 1.8 million Android a"