Skip to content
ERP LEADERS
Subscribe to the brief Follow on LinkedIn

The news behind the software that runs companies, explained for everyone.

Security

Anthropic's Claude directed an attacker's AI tools. They got into 27 companies.

Security firm Gambit recovered the server used to prepare the attacks and rebuilt the campaign, The Register reported.

ERP LEADERS news desk · · First reported by The Register · Edition no. 18

Between 10 and 15 September, the attacker launched at least 105 attacks and compromised at least 27 companies "to varying degrees."

The victims include a Fortune 500 hospitality company and a major US airline. A large US industrial supplies distributor and a US online fashion retailer were also hit. The attacks took more than 600,000 credit card records from two victims.

The attacker used three open-source AI tools, whose code anyone can download and change. The one that directed the others ran on Anthropic's Claude Opus 4.6. The other two used GLM and DeepSeek models. Gambit reports that newer models refused the attack requests.

The attacker's own cost review put the average at $25.46 per completed scan, meaning one automated search of a target for weak spots. Gambit estimates the whole campaign cost $12,000 to $18,000.

Card-stealing code was confirmed on 19 websites.

"Where access was achieved, it usually took less than a day, and in many cases just a few hours," Gambit's director of threat intelligence wrote.

If getting in now takes a few hours, how many days does your patch cycle take?

Image: AI-generated.

Sources

Spotted an error? Tell us. Every correction is logged on Standards.

Your reading room

Companies in this story
Anthropic

Our file on Anthropic

  1. 7 OctFiled later

    Analysts said Claude subscribers use 42% of Anthropic's computing. They pay 10% of sales.

  2. 6 OctFiled later

    Microsoft planned $1 billion for employees using Claude. Then it cut over a third.

  3. 3 OctFiled later

    Epic stopped building new products for six weeks. An AI model found the flaws.

  4. 1 OctFiled later

    Anthropic said robots could do most physical tasks. They're cost-competitive on 0.3%.

  5. 1 OctFiled later

    Trump ordered federal agencies to rename AI. The new word is Super Intelligence.

All 29 Anthropic stories

For your next steering committee

Questions for your own programme. They are not findings about any company in this story.

  1. 1Ask which AI tools already touch your ERP or finance data, including the ones nobody approved.
  2. 2Ask what each tool is allowed to change, and who reviews what it changed.
  3. 3Ask how the result is measured, and who decides to switch a tool off.

Issue 01 of the ERP LEADERS brief puts a timeline, the three-number review and six questions on one page. Read issue 01

Founding reader view is on in this browser. It is a reading view, not secure access. Print the working sheet

Founding reader

Welcome back. · Issue 01

1 comment under this story on LinkedIn. Read the discussion

Keep reading

The ERP LEADERS brief Subscribe