---
title: "Within 12 Hours: Cathedral Startup's AI Agents Breach Anthropic Internal Networks and Access Corporate Correspondence"
description: "Startup Cathedral used autonomous AI agents to breach Anthropic's internal networks within 12 hours, gaining access to HR and sales systems. The incident raised alarms in the US administration as a national security threat."
date: 2026-10-27T13:25:05.426Z
lang: en
url: https://xab.info/en/posts/cathedral-ai-agents-breach-anthropic-networks
tags: [cathedral, anthropic, claude, ai-security, cyberattack, bug-bounty, us-government]
author: "Alexander Buran"
publisher: "XAB.info"
---

# Within 12 Hours: Cathedral Startup's AI Agents Breach Anthropic Internal Networks and Access Corporate Correspondence

![Monitor screen with code on a dark background and the Claude logo in the center illustrating AI vulnerability](https://xab.info/media/2026/10/27/cathedral-ai-agents-breach-anthropic-networks/cathedral-ai-agents-breach-anthropic-networks-1.webp)

## Key Points

- Startup Cathedral used autonomous AI agents to gain access to Anthropic's internal networks in less than 12 hours under a bug bounty program
- The penetration occurred via vulnerabilities in third-party corporate services (sales, HR, administration) rather than Anthropic's secured software
- Access was limited to HR, sales, and IT systems; source code, model weights, and Claude user data were not compromised
- Washington classified the incident as a national security threat, highlighting the risk of similar attacks by foreign intelligence services
- Anthropic blocked access on the day of discovery and disabled vulnerable third-party software until vulnerability fixes were confirmed

Startup Cathedral, founded by former specialists of the US DOGE service, has demonstrated that autonomous AI systems can breach the corporate defenses of a leading artificial intelligence developer in a matter of hours. According to The Washington Post, cited by RBC-Ukraine, Cathedral researchers gained access to confidential internal information belonging to Anthropic — the creator of the Claude chatbot — as part of an official bug bounty program. The entire penetration process took less than 12 hours.

### Tactics: From Direct Assault to Bypassing via Third-Party Services

Initially, the Cathedral team spent several days trying to break directly through Anthropic's secured software, but this route proved to be a dead end. The researchers then changed tactics, shifting their focus to third-party corporate services used by the company for sales management, HR tasks, and administration. By deploying autonomous AI agents, the specialists unlocked access to sensitive internal information, including corporate correspondence, in just 12 hours. This specific scenario — attacking peripheral services that integrate corporate networks rather than the security "front end" — has sparked the greatest concern among cybersecurity experts.

### Limited yet Alarming Scope of Access

Anthropic emphasizes that the researchers gained access only to a restricted set of HR, sales, and IT systems. Hackers did not obtain direct access to the source code, model weight coefficients, or chatbot user queries and responses. Nevertheless, the very fact that autonomous AI agents managed to bypass the multi-layered defenses of a company working on technologies compared by Washington in potential power to nuclear weapons within a single workday has prompted a serious reassessment of corporate cybersecurity approaches across the industry.

### Washington Responds: A National Security Issue

The incident provoked a wave of outrage within the administration of US President Donald Trump. A high-ranking official, speaking on condition of anonymity, stated that the Cathedral report "raises national security concerns." The official stressed that if a young startup could breach the defenses of a company developing advanced AI technologies in a matter of hours, foreign intelligence hackers could do the same with comparable ease. Cathedral, valued by investors at $1.4 billion, works closely with the US government and holds contracts with several federal agencies, adding further political resonance to the incident.

### Systemic Industry Problem and Prior Warnings

Cybersecurity experts point out that the Cathedral case demonstrates not an isolated error, but a systemic problem across the entire industry. Even top AI developers remain vulnerable due to their reliance on standard third-party software that unifies corporate networks and creates single points of entry for attackers. This situation unfolds against the backdrop of lingering tension between Anthropic and the Pentagon: the company previously restricted the military use of its products over its refusal to develop autonomous weapons. Furthermore, back in September, one of the developers publicly left Anthropic, stating that the company was taking unjustified risks by relying on ordinary corporate messengers like Slack to discuss critical developments.

### Anthropic's Response and Measures Taken

Anthropic representatives assured that their monitoring systems captured part of Cathedral's activities even before the official report was submitted, and access was blocked on the same day. The problematic third-party software was temporarily disconnected and brought back online only after the developers of the respective services confirmed the complete elimination of the discovered vulnerabilities. The company stated that the incident prompted a review of the architecture for interacting with external services and an enhancement of controls around the corporate network perimeter.

## Fact-Check & Sources

- [Пробили защиту за 12 часов: как ИИ-агенты получили доступ к закрытым чатам Anthropic](https://www.rbc.ua/ukr/news/probili-zahist-12-godin-k-shi-agenti-otrimali-1793099601.html) - The primary source contains all key facts: 12-hour breach, bypassing tactics via third-party services, assessment of access scope, Washington's reaction, Cathedral's $1.4B valuation, Pentagon context, and Anthropic's measures. Reference to The Washington Post as the primary source.

## FAQ

### What exactly did Cathedral researchers manage to access within Anthropic's networks?

According to Anthropic, access was restricted to HR, sales, and IT systems, as well as corporate correspondence. Source code, model weight coefficients, and Claude user queries were not compromised.

### How did the penetration take place?

Cathedral researchers initially spent several days attempting a direct attack on Anthropic's secured software, but then switched to third-party corporate services for sales, HR, and administration. By deploying autonomous AI agents, they gained access to internal information in under 12 hours.

### What is Cathedral and what is its connection to the US government?

Cathedral is a startup founded by former DOGE service specialists. Investors value the company at $1.4 billion. Cathedral works closely with the US government and holds contracts with multiple federal agencies.

### What measures did Anthropic take following the incident?

Anthropic blocked access on the same day, temporarily disabled the vulnerable third-party software, and restored it only after developers confirmed the complete removal of vulnerabilities. The company's monitoring systems recorded some of the actions even before the official report was submitted.