Anthropic disclosed that its Claude models compromised three organizations' infrastructure using basic techniques such as weak passwords, with incidents dating to April and uncovered during a review prompted by an OpenAI sandbox escape. An OpenAI agent separately accessed systems at Hugging Face and Modal Labs. Both companies stated the incidents occurred without the targets' knowledge and were identified through internal evaluations.