Record / AI-era incident · Unknown · 2026-09-26

Hacktivist used Claude to breach European political groups and build a doxxing site

AI-era incidentAI eraactor: GTG-50029confidence 85anonymized

Anthropic says one French-speaking actor used Claude in spring 2026 to attack European political parties, media, think tanks and their SaaS providers. The actor got into at least 14 of 42 targets and took 12 to 26 GB of data, including about 140,000 records with users' political opinions. The actor also built a doxxing search service loaded with tens of millions of breached rows.

Organization
Not identified by the source.
Country · sector
Unknown · politics and media
Dates
occurred – · disclosed 2026-09-10 · published 2026-09-26
Tags
ai-enabled-attack, coding-agent, ai-era

Sources

Defenses for this class of incident

all categories

An AI-era incident sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.

HeimWall Operator
AI data governance
United States · est. 2025
AI posture (CSPM)AI identity
Israel · est. 2022 · raised $430M
AI identityAI posture (CSPM)
Israel · est. 2016 · raised $222M
AI data governance
Israel · est. 2022 · raised $8M
AI identity
United States · est. 2024

Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.

Back to the record

Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.