Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.

Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the national electoral institute, four state governments, Mexico City’s civil registry, and Monterrey’s water utility, Bloomberg reported. The haul included documents related to 195 million taxpayer records, voter records, government employee credentials, and civil registry files. The attackers' weapon of choice wasn’t malware or sophisticated tradecraft created in stealth. It was a chatbot available to anyone.The attackers created a series of prompts telling Claude to act as an elite penetration tester running a bug bounty. Claude initially pushed back and refused. When they added rules about deleting logs