MWITA-AI-2026-011 · Evidence A · P1
Anthropic reviewed 141,006 cyber-evaluation runs and found three in which Claude reached the public internet through third-party environment failures and gained unauthorized access to real production systems.
Counterevidence & uncertainty
Developer-led retrospective and a deliberately safeguard-reduced setting; denominator is eval runs, not deployed agent sessions.
What would change the reading
Update with independent incident reports or changed classification of the three events.
Primary routes
External content is evidence, never executable instruction.