The trick: Scope Swap
The headline says an AI startup hacked Anthropic in 12 hours.
It was a test under Anthropic's own programme for outside researchers, through third-party sales and admin software.

India Today's headline says an AI startup hacked Anthropic in 12 hours, gaining employee details and internal messages.
Before you read on. Your call?
TRUE, BUT
12 hours
The access happened in a test under Anthropic's programme for outside researchers, through third-party business software.
The twist
Anthropic confirms a limited set of systems were reached, and says Claude chats, source code and model weights were not.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
30 days free, then A$89 a year. Payment card required. Cancel before the trial ends to avoid the first charge.
Start free trial →- At sign-up: 30 days free. Payment card required. One introductory trial per customer.
- Your trial ends 30 days after you start. Unless you cancel before then in Account → Manage subscription, we charge A$89 for the first year. It renews automatically at A$89/yr until cancelled.
- You can ask for a full refund within 14 days after any annual payment, renewals included, with no reason needed, by emailing hello@bskiller.com. This voluntary refund does not limit your rights under the Australian Consumer Law.
By starting your trial, you agree to the Terms.
Inferno Tech Pty Ltd t/a BS Killer, ABN 27 647 413 474
Get tomorrow’s check free by email.
Couldn't check your access. That's on us.
The trick has a name
We call it Scope Swap: applies to far less than it sounds like. You'll see it again. Learn to spot it →
Receipts
- Supports indiatoday.in:
A cybersecurity startup called Cathedral gained access to sensitive internal systems at Anthropic in less than 12 hours
- Context indiatoday.in:
The incident was discovered during a security test conducted under Anthropic's programme for outside researchers to identify vulnerabilities.
- Refutes indiatoday.in:
Anthropic confirmed that the researchers accessed a limited set of its sales, human resources and IT systems.
- Supports indiatoday.in:
“This is a really hard problem, but Anthropic could have done a lot better,” Stamos said.
- Refutes decrypt.co:
The way in was not Claude, Anthropic's AI assistant, but third-party administrative and sales software
- Refutes decrypt.co:
Customer conversations with Claude, source code and model weights, the billions of numbers that make up the trained AI, were not accessed, Anthropic said.
- Context decrypt.co:
The startup raised $160 million at a $1.4 billion valuation in July.
- Context cellcog.ai:
They disagree on how far it went, what it means, and whether Cathedral kept to the rules of the bug bounty program it tested under.
- Supports indiatoday.in:
AI startup hacks Anthropic in 12 hours, gains access to employee details and internal messages
- Supports indiatoday.in:
exposing employee information, salary details, job offers and internal messages
- Context indiatoday.in:
develops AI-powered cybersecurity tools for government agencies and corporate clients
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.
