DoD contractor connected secure intelligence system to personal Claude Code account, causing security incident
Severity: high · Patch status: no-fix-needed · Since 2026-11-02
WIRED reports that earlier in 2026 a defense contractor caused a security incident at the Department of Defense by connecting a secure centralized system used by multiple intelligence agencies to their personal account for Claude Code, Anthropic's AI coding agent. The connection routed data or access from the classified environment through the contractor's personal Anthropic account, creating a potential channel for sensitive government data to leave controlled systems. The contractor's employer was not fully named in the excerpt. This is an insider/policy failure rather than a software vulnerability; remediation involves access revocation, audit, and enforcement of AI tool usage policies in classified environments.
What to do
- Audit and revoke any personal AI service accounts connected to classified or secure systems
- Review logs of the affected system for data exfiltration via the AI agent connection
- Enforce policies prohibiting personal AI/coding-agent accounts in secure environments
- Re-train contractors and staff on authorized tooling in classified networks
Sources
All live incidents on Threat Watch
