Anthropic's Claude Was Reportedly Jailbroken To Allegedly Help Steal Sensitive Mexican Government Data
Description
An unknown attacker reportedly jailbroke Anthropic's Claude and used it during a December 2025-January 2026 campaign against Mexican government systems. According to Gambit Security, the attacker used Claude to identify vulnerabilities and to generate exploitation scripts, which were then used to plan automated data theft. The attack reportedly contributed to theft of 150 GB of taxpayer, voter, government employee, and civil-registry data.
Actors
Alleged Deployers
- unknown-hacker
Alleged Developers
- anthropic
Harmed Parties
- mexican-taxpayers
- mexican-voters
- mexican-government-employees
- state-government-of-tamaulipas
- state-government-of-michoacan
- state-government-of-jalisco
- monterrey-water-and-drainage-services
- servicio-de-administracion-tributaria-(sat)
- instituto-nacional-electoral-(ine)
- direccion-general-del-registro-civil-de-la-ciudad-de-mexico-(dgrc)
Classification
Risk Domain
Malicious Actors & MisuseRisk Subdomain
4.2. Cyberattacks, weapon development or use, and mass harm
MIT Risk Profile
Source
Related Incidents (Malicious Actors & Misuse)
View all →Female Students at Westfield High School in New Jersey Reportedly Targeted with Deepfake Nudes
Oct 2023
ChatGPT Was Alleged to Have Aided Planning of Florida State University Mass Shooting
Apr 2025
Ongoing Purported AI-Assisted Identity Fraud Enables Unauthorized Access to Western Companies by North Korean IT Workers
Research Papers on This Topic
How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs
AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents
Regulating ChatGPT and other Large Generative AI Models
Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack