{"schema":"postcutoff/event@1","as_of":"2026-10-30T13:42:00+01:00","url":"https://postcutoff.com/e/2026-10-26-cathedral-ai-agents-breach-anthropic-business-systems/","md":"https://postcutoff.com/e/2026-10-26-cathedral-ai-agents-breach-anthropic-business-systems/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-26-cathedral-ai-agents-breach-anthropic-business-systems","date":"2026-10-26","date_precision":"day","short_title":"Cathedral's agents breach Anthropic business systems","deck":null,"takeaway":"On Oct 26, 2026 the Washington Post reported on a draft report by Cathedral, a months-old AI security startup founded by four former DOGE staffers.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":[{"n":1,"title":"Futurism: Elon Musk-linked startup says its AI agents hacked Anthropic in just hours (Oct 28)","url":"https://futurism.com/future-society/startup-ai-agents-hacked-anthropic-hours","type":"press","group":"press","domain":"futurism.com"},{"n":2,"title":"Tech Times (UK): Ex-DOGE researchers used AI to breach Anthropic systems in under 12 hours (Oct 27)","url":"https://www.techtimes.co.uk/anthropic-breach-third-party-software-ai-agents-1809437","type":"press","group":"press","domain":"techtimes.co.uk"},{"n":3,"title":"Washington Post: Researchers at cybersecurity start-up Cathedral got inside Anthropic","url":"https://www.washingtonpost.com/technology/2026/10/26/researchers-cybersecurity-start-up-cathedral-got-inside-anthropic/","type":"press","group":"press","domain":"washingtonpost.com"},{"n":4,"title":"Decrypt: AI agents found a way into Anthropic's business systems in under 12 hours","url":"https://decrypt.co/381860/ai-agents-hack-anthropic-business-systems-12-hours","type":"press","group":"press","domain":"decrypt.co"},{"n":5,"title":"Tech Startups: Ex-DOGE AI cybersecurity startup Cathedral breaches Anthropic's internal systems","url":"https://techstartups.com/2026/10/26/ex-doge-ai-cybersecurity-startup-cathedral-breaches-anthropics-internal-systems-in-under-12-hours-using-ai-agents-exposing-sensitive-employee-data/","type":"press","group":"press","domain":"techstartups.com"}],"official":0,"filed":"2026-10-26","updated":"2026-10-29","orgs":["Cathedral","Anthropic"],"title":"Ex-DOGE startup Cathedral says its AI agents got into Anthropic's internal business systems in under 12 hours; Anthropic disputes the scope","summary":"On Oct 26, 2026 the Washington Post reported on a draft report by Cathedral, a months-old AI security startup founded by four former DOGE staffers. Cathedral says its autonomous agents found a way into Anthropic's internal systems in under 12 hours, testing under Anthropic's program for outside security researchers, and reached meeting transcripts, pay data and Slack messages about frontier models. Anthropic says the agents reached only \"a limited set\" of sales, HR and IT systems through third-party business software, touched no Claude conversations, source code or weights, and were cut off the same day.","key_facts":["Source: The Washington Post (Oct 26, 2026), which reviewed Cathedral's draft report. Secondary: Decrypt, Gizmodo, Tech Startups","Cathedral's claims: AI agents carrying out multi-step attacks without per-step human approval found paths in within 12 hours. They reached meeting transcripts, salary and job-offer details, and Slack messages discussing Anthropic's most advanced models, and the draft report says data access was kept to a minimum 'in accordance with security research best practices'","Entry point: vulnerabilities in third-party administrative and sales platforms, not Claude itself (Decrypt)","Anthropic: its monitoring flagged some of the activity before Cathedral reported it and it 'shut off their access the same day'. It says only a limited set of sales, HR and IT systems with business contacts and basic user account records was reached, that Cathedral did not disclose all its testing as the program requires, and that the startup overstated the national-security implications","Government reaction: an unnamed senior Trump administration official told the Post that the report had circulated in government and raised national-security concerns, suggesting Chinese actors could do the same quickly","Cathedral: raised $160M in July 2026 at a $1.4B valuation (Decrypt; other outlets name Andreessen Horowitz and Sequoia as leads, unverified here); the founders are four DOGE alumni, not named in the coverage we read"],"key_numbers":[],"tags":["cybersecurity","ai-agents","offensive-ai","bug-bounty","anthropic","red-teaming"],"science":null,"body_md":"## What happened\n\nCathedral tested Anthropic under a bug-bounty-style program that invites outside experts to probe the company. Its agents found weak\npoints in third-party business software and moved from there into Anthropic's corporate environment. The Washington Post had Cathedral's\ndraft report, and the two sides describe the result very differently. Cathedral describes sensitive internal material reached within half\na day. Anthropic describes a contained test of peripheral systems, with no access to customer conversations, code or model weights.\n\n## Why it matters\n\nIt is a public example of autonomous AI agents breaking into a frontier lab, even if only its business systems. It came on the day\nAnthropic filed its S-1, which lists security incidents among its risks, and amid US concern about the security of the labs (break-ins at\nOpenAI, insider cases). Both accounts remain partly unverified: the report is a draft, and Anthropic's rebuttal is its own.","disputed":[],"related":[{"id":"2026-10-26-anthropic-files-public-s1-ipo","url":"https://postcutoff.com/e/2026-10-26-anthropic-files-public-s1-ipo/","date":"2026-10-26","date_precision":"day","short_title":"Anthropic files public S-1 (ticker ANT)","deck":null,"takeaway":"For the first time, a frontier lab's finances, compute obligations and governance are on public record under securities law.","category":"business","category_label":"Business","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":34,"official":2,"filed":"2026-10-26","updated":"2026-10-30","orgs":["Anthropic"]},{"id":"2026-10-13-anthropic-acquires-opaque-systems","url":"https://postcutoff.com/e/2026-10-13-anthropic-acquires-opaque-systems/","date":"2026-10-13","date_precision":"day","short_title":"Anthropic acquires Opaque Systems (confidential and verifiable AI)","deck":null,"takeaway":"It is a small team acquisition, but its subject matters to Anthropic: protecting model weights and customer data, and proving to customers and governments what an agent actually did.","category":"business","category_label":"Business","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":3,"official":2,"filed":"2026-10-19","updated":"2026-10-19","orgs":["Anthropic","Opaque Systems"]}],"people":[{"id":"elon-musk","name":"Elon Musk","url":"https://postcutoff.com/person/elon-musk/"},{"id":"donald-trump","name":"Donald Trump","url":"https://postcutoff.com/person/donald-trump/"}],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-29","type":"edit","text":"Added Futurism and Tech Times (UK) second-wave links (news agent)"},{"date":"2026-10-26","type":"filed","text":"Created (Washington Post via secondary coverage, Decrypt read directly; the Post's report is paywalled and was not read in full)"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-26","run":null,"sources_read":"Washington Post via secondary coverage, Decrypt read directly; the Post's report is paywalled and was not read in full","updated":"2026-10-29","human_review":null,"version":{"date":"2026-10-29"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":179,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":118,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":209,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":148,"in_training_data":false}],"short_url":null}