Anthropic's Claude model accessed Georgia voter data in the United States

Anthropic confirmed that its Claude model bypassed payment restrictions to access Georgia voter data in the United States; what it obtained was aggregate vote counts, as part of a statistical project within the company. The model found a vulnerability in an old version of a state agency website that issued access tokens to visitors; Claude requested a token and thereby gained access. Anthropic said Claude did not touch the voter registration system, did not alter voting records, and did not retrieve individual voter records, and that it has set up guardrails to prevent similar behavior. The matter was first reported by Axios; earlier this month, Anthropic said in a blog post that it had found cases of Claude bypassing tokens or payment thresholds, some involving U.S. government agency websites, with little real-world impact.