Cathedral’s agents breach Anthropic business systems
Partly confirmed
The takeaway
On Oct 26, 2026 the Washington Post reported on a draft report by Cathedral, a months-old AI security startup founded by four former DOGE staffers.
Status
- Claim
Partly confirmed
- Our reporting
- Medium confidence
- Importance
- 3 of 5
- Last verified
- 29 October 2026
Your AI and this story
- GPT-6 Astra179 days after its cutoff
- Claude Opus 5.5118 days after its cutoff
- Gemini 4 Argon209 days after its cutoff
- Grok 4.7148 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 118 days before it.
Key facts
- Source: The Washington Post (Oct 26, 2026), which reviewed Cathedral’s draft report. Secondary: Decrypt, Gizmodo, Tech Startups
- Cathedral’s claims: AI agents carrying out multi-step attacks without per-step human approval found paths in within 12 hours. They reached meeting transcripts, salary and job-offer details, and Slack messages discussing Anthropic’s most advanced models, and the draft report says data access was kept to a minimum ‘in accordance with security research best practices’
- Entry point: vulnerabilities in third-party administrative and sales platforms, not Claude itself (Decrypt)
- Anthropic: its monitoring flagged some of the activity before Cathedral reported it and it ‘shut off their access the same day’. It says only a limited set of sales, HR and IT systems with business contacts and basic user account records was reached, that Cathedral did not disclose all its testing as the program requires, and that the startup overstated the national-security implications
- Government reaction: an unnamed senior Trump administration official told the Post that the report had circulated in government and raised national-security concerns, suggesting Chinese actors could do the same quickly
- Cathedral: raised $160M in July 2026 at a $1.4B valuation (Decrypt; other outlets name Andreessen Horowitz and Sequoia as leads, unverified here); the founders are four DOGE alumni, not named in the coverage we read
What happened
Cathedral tested Anthropic under a bug-bounty-style program that invites outside experts to probe the company. Its agents found weak points in third-party business software and moved from there into Anthropic’s corporate environment. The Washington Post had Cathedral’s draft report, and the two sides describe the result very differently. Cathedral describes sensitive internal material reached within half a day. Anthropic describes a contained test of peripheral systems, with no access to customer conversations, code or model weights.
Why it matters
It is a public example of autonomous AI agents breaking into a frontier lab, even if only its business systems. It came on the day Anthropic filed its S-1, which lists security incidents among its risks, and amid US concern about the security of the labs (break-ins at OpenAI, insider cases). Both accounts remain partly unverified: the report is a draft, and Anthropic’s rebuttal is its own.
Sources
5 sources from 5 sites. Numbers match the chips in the text.
5 sources: 5 press
Press
- Futurism: Elon Musk-linked startup says its AI agents hacked Anthropic in just hours (Oct 28)futurism.com, press
- Tech Times (UK): Ex-DOGE researchers used AI to breach Anthropic systems in under 12 hours (Oct 27)techtimes.co.uk, press
- Washington Post: Researchers at cybersecurity start-up Cathedral got inside Anthropicwashingtonpost.com, press
- Decrypt: AI agents found a way into Anthropic’s business systems in under 12 hoursdecrypt.co, press
- Tech Startups: Ex-DOGE AI cybersecurity startup Cathedral breaches Anthropic’s internal systemstechstartups.com, press
Changes
- Added Futurism and Tech Times (UK) second-wave links (news agent)
- Filed (Washington Post via secondary coverage, Decrypt read directly; the Post’s report is paywalled and was not read in full)