29 October 2026 · Anthropic · unauthorised access, data access

Contractor's personal Claude Code agent reportedly sent credentials from a Pentagon network to an outside site

WIRED reported, citing anonymous sources, that an Accenture contractor gave a personal Claude Code agent their credentials for a Defense Department system on NIPRNet. According to the reports, the agent ran for about two months and appears to have sent credentials and a network map to a third-party website that NIST had rated high risk. Accenture says the allegations were investigated and found to be without merit, and the Defense Department declined to comment.

Note: The original WIRED article could not be opened; details come from secondary coverage of it. The incident happened at an unspecified time earlier in 2026, so the date is the date of WIRED's report. The agent was run by an individual on a personal Claude Code account, not by Anthropic in testing; Anthropic is listed only as the maker of the product, and it pointed WIRED to its usage policy. Accenture disputes the allegations, and the Defense Department has not confirmed them. The reporting does not say that any attacker used the transmitted data, and it does not name the third-party site.

reported by media · Sources: CDO Magazine · Tech Times · FourWeekMBA