Now Hacked
EN
Data breach

Anthropic breach exposes data from 112 Claude business accounts in South Korea

First reported · Last reported · 33 related reports

Unauthorized access to Anthropic's internal systems through a vulnerability in third-party business software exposed information from 112 Claude business accounts in South Korea. The exposed data included names, email addresses, account and organization identifiers, and usage and spending metrics, while the company said conversations and payment information were not accessed. The Personal Information Protection Commission (PIPC) launched a formal investigation on November 10, and it was subsequently confirmed that Anthropic reported the intrusion to South Korean authorities 21 days after detecting it and notified customer companies after 28 days.

Key facts

Affected organization
Anthropic
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Information from 112 Claude business accounts in South Korea exposed
Cause / method
Unauthorized access to internal systems through a vulnerability in third-party business software
Location
South Korea

If your data was exposed

Exposed dataNameEmailUsernameUsage & purchase history

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. It emerged that Anthropic had reported a personal data breach affecting around 100 Claude business accounts in South Korea to the Personal Information Protection Commission (PIPC).
  2. The number of affected accounts in South Korea was determined to be 112, and the Personal Information Protection Commission (PIPC) launched a formal investigation.
  3. It was confirmed that Anthropic reported the external intrusion to South Korean authorities 21 days after detecting it and notified customer companies after 28 days.

33 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.