# Anthropic / Claude Data Breach Investigation Canonical: https://hallattorneys.com/investigations/anthropic-claude Published: November 7, 2026 Last reviewed: November 7, 2026 Business-system access · Customer and employment privacy inquiries Hall Attorneys is investigating Anthropic / Claude business-system access. Customers, business contacts, employees, and job applicants may request a review. Hall Attorneys is investigating reported third-party access to Anthropic’s business systems and related privacy concerns involving customers, business contacts, employees, and job applicants. We are reviewing access controls, notices, potential exposure, and possible privacy or consumer claims. The customer notice describes limited contact and account information and does not confirm whether a particular person’s information was viewed. Did you receive an Anthropic notice or have related concerns as a Claude user, business contact, employee, or job applicant? Individuals and authorized business representatives may request a review. You do not need a notice or known financial loss to contact us. ## What has been reported? An Anthropic customer notice reviewed by Hall Attorneys, titled “Notice Regarding Your Organization’s Account Information,” says limited business-contact and account information may have been subject to unauthorized access by a third-party cybersecurity research company. In a November 7 public clarification, Anthropic employee Lydia Hallie connected the email to Cathedral’s access through third-party business software, previously discussed publicly on October 26. Logan Graham’s October 26 statement said Anthropic stopped the access and described the research activity as outside its safe-harbor policy. October 26 and November 7 are public-statement dates, not established intrusion dates. The materials reviewed do not establish an affected-person total, the complete access window, or which individual records were viewed. Receiving a precautionary notice is not proof that a particular person’s data was accessed. Sources: Public customer post reproducing Anthropic’s account-information notice (November 7, 2026): https://x.com/theonejvo/status/2119019762906804395 Anthropic employee Lydia Hallie: clarification about the customer notice (November 7, 2026): https://x.com/lydiahallie/status/2119117468384051421 Anthropic’s Logan Graham: statement about third-party research access (October 26, 2026): https://x.com/logangraham/status/2114849047953670635 ## Broader context The Post reports Cathedral’s claims involving meeting transcripts, compensation records, and internal Slack messages. Those claims remain unverified by Hall Attorneys. Separately, Anthropic’s Logan Graham disputed a 12-hour timeline and described several days of attempts followed by exploitation of two third-party vulnerabilities. He said model weights and Claude conversations were not reached. These are attributed statements about the research activity, not a finding about which individuals’ records were accessed. Internal business messages are different from customer conversations with Claude. A reported path to a system does not establish access to every record in it. We have not determined which employment-related records, if any, were accessed. Anthropic’s published disclosure policy excludes third-party systems from its coverage, limits research to minimal proof, and prohibits retaining accessed data. Safe harbor is conditional. The policy provides context for our review, not a legal determination about this incident or proof of every term that applied to the activity. Sources: Washington Post: https://www.washingtonpost.com/technology/2026/10/26/researchers-cybersecurity-start-up-cathedral-got-inside-anthropic/ Anthropic’s Logan Graham: statement about third-party research access (October 26, 2026): https://x.com/logangraham/status/2114849047953670635 Anthropic: Responsible Disclosure Policy: https://www.anthropic.com/responsible-disclosure-policy ## What information does the notice identify? According to the customer notice, the information involved may include: - Business-contact information, such as names and email addresses. - For enterprise Claude accounts, account IDs, organization IDs, and plan tiers. - Enterprise account usage and spend metrics. The notice says the affected information does not include Claude conversation content, passwords, payment-card information, or bank-account information. Usage and spend metrics are different from payment-card or bank details. The notice does not establish that API keys were exposed or that Claude accounts were taken over. It also does not establish that every Claude user, API customer, or person who contacted Anthropic was affected. These limits matter when evaluating an individual inquiry. Sources: Public customer post reproducing Anthropic’s account-information notice (November 7, 2026): https://x.com/theonejvo/status/2119019762906804395 Anthropic employee Lydia Hallie: clarification about the customer notice (November 7, 2026): https://x.com/lydiahallie/status/2119117468384051421 ## What does Anthropic say it has done? The customer notice says Anthropic disabled the third party’s access, worked to remediate the identified vulnerabilities, and began investigating. It says the research firm provided a written certification that it had deleted the accessed data and would not use it. The notice also says the incident was reported to relevant Korean authorities. Anthropic states in the notice that it found no evidence that the accessed data was altered, deleted, or otherwise misused. Those are attributed company statements. Hall Attorneys has not independently verified the deletion assurance or determined whether a particular person’s information was accessed or used. Our review concerns safeguards around contact, account, and other business-system records; the scope and duration of access; notification practices; and the evidence supporting remediation and deletion assurances. No court findings about legal responsibility or compensation are established by this notice. Sources: Public customer post reproducing Anthropic’s account-information notice (November 7, 2026): https://x.com/theonejvo/status/2119019762906804395 Anthropic employee Lydia Hallie: clarification about the customer notice (November 7, 2026): https://x.com/lydiahallie/status/2119117468384051421 ## Who should contact Hall Attorneys? We would like to hear from individuals and authorized business representatives with information or concerns connected to this account-information incident, including people who: - Received the account-information notice, directly or through their organization. - Used an enterprise Claude account or acted as an account administrator, developer, or business contact. - Inquired about Anthropic products, an enterprise plan, or a business relationship and have related privacy concerns, even without a paid account. - Are a current or former Anthropic employee, contractor, or job applicant with an incident-related notice or privacy concern. - Received suspicious communications using nonpublic account, organization, plan, usage, or spending details. - Spent time or money reviewing a notice, investigating suspicious activity, or responding to a potentially related privacy concern. The invitation to employees and job applicants is part of our investigation; it does not establish that any specific employment file was accessed. An inquiry can begin with a general description. Suspicious activity alone does not establish a connection to this incident, and ordinary subscription or API spending is not, by itself, a loss caused by the incident. We will review the facts, records, and applicable agreements. ## How should you check an unexpected message? Use Anthropic’s official Privacy Center or an established account contact to verify an unexpected account or privacy message. The customer notice lists privacy@anthropic.com for questions. A sender name, logo, or accurate account detail alone does not establish that a new message is genuine. The FTC recommends contacting a company through a website or telephone number you already know is genuine. Do not send passwords or verification codes, approve unfamiliar sign-ins, or pay a purported security or refund fee in response to an unexpected message. These are general precautions, not findings that phishing or financial fraud occurred in this incident. Contact your organization’s security team or Anthropic promptly about urgent account concerns. Requesting legal review does not submit a support ticket or privacy-rights request to Anthropic and should not delay protective action. Sources: Anthropic Privacy Center: official privacy information and contact options: https://privacy.claude.com/en/ Federal Trade Commission: Recognizing and avoiding phishing scams: https://consumer.ftc.gov/articles/how-recognize-avoid-phishing-scams ## What records should you keep? Keep the original notice and its delivery date, relevant account or plan records, suspicious messages, support correspondence, and records of response costs. Note whether your concern relates to an account, a business contact, employment, or an application. Describe these records before sending copies. Do not send passwords, API keys, authentication or recovery codes, Claude conversations, confidential prompts or outputs, complete account identifiers, payment details, personnel files, or other people’s records in an initial inquiry. Keep only information you are authorized to access; we can discuss what additional records are needed and an appropriate way to provide them. ## Contact Hall Attorneys about Anthropic / Claude Provide your name, state or country of residence, a safe way to reach you, and your relationship to Anthropic or Claude. Tell us whether you received a notice and approximately when. You may describe a customer, business-contact, employment, or job-application concern in general terms. For an organizational inquiry, include your role and a general description of the account or business relationship. Briefly describe your privacy concern, any suspicious activity, and any response expenses. Do not include secret values, confidential customer information, or Claude conversation content. Let us know whether it is safe to leave a voicemail. Contact: Nicholas Hall, Hall Attorneys, P.C. Email: nhall@hallattorneys.com Phone: 713-428-8967 Request a Case Review: https://hallattorneys.com/connect Attorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Anthropic or Cathedral. This page describes an investigation, not a filed lawsuit by Hall Attorneys concerning this incident. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.