In September 2026, hackers began stealing user accounts of the Claude service by bypassing two-factor authentication. Anthropic responded by forcibly logging users out and removing saved bank cards. Later, it was revealed that the criminals also found a way to use Claude Code for free by stealing tokens from paid accounts.
From the beginning to today
Cybercriminals have begun stealing user accounts on Claude, bypassing two-factor authentication. Anthropic is responding by forcibly logging users out and removing saved bank cards.
Hackers have found a way to use the Claude Code service for free by stealing tokens from paid accounts. Anthropic confirmed the attacks by info stealers and took action by forcibly terminating compromised sessions.
2 of 2 events
the editorial blocs represented in the collected reporting
5 of 7 blocs are not represented in the collected reporting.