Cathedral breaches Anthropic systems in security test, reaching staff data and internal messages

AI startup hacks Anthropic, gains access to employee details, internal messages

Security startup Cathedral used an AI agent to reach sensitive internal data at Anthropic in under 12 hours, as part of Anthropic's external researcher security testing program. A draft report reviewed by The Washington Post says the data included employee records, salaries, offer letters, meeting notes and Slack messages.

Why it matters: An agent found flaws in Anthropic's business software, and third-party software bugs exposed staff records and internal messages.