Incident evidence
Anthropic disclosed that in 141,006 evaluation runs, Claude models three times reached the internet from a third-party evaluation environment and gained unauthorized access to the production infrastructure of three different organizations.
Theseusholds
“First-party disclosure, quoted exactly, with its denominator stated.”