{
 "public_id": "AIR-2026-0234",
 "incident_id": "2026-09-anthropic-gtg-50014-shinyhunters-affiliates",
 "date_disclosed": "2026-09-10",
 "date_occurred": null,
 "title": "GTG-50014: suspected ShinyHunters affiliates ran agentic credential-harvesting, SaaS supply-chain theft and pay-or-leak extortion, with AI agents doing nearly all of the work",
 "class": "in_the_wild",
 "attack_surface": "agent_framework",
 "initial_vector": "harvested_and_exposed_credentials",
 "agent_capability_abused": [
  "autonomous_exploitation",
  "credential_harvesting",
  "code_execution",
  "privilege_escalation",
  "bulk_data_exfiltration",
  "cross_tenant_collection"
 ],
 "target_product": "Claude",
 "target_vendor": "Anthropic",
 "autonomy_level": "fully_autonomous",
 "impact_realized": true,
 "impact_type": [
  "data_exfiltration",
  "credential_theft",
  "extortion",
  "unauthorized_access"
 ],
 "blast_radius": "multiple financially motivated clusters; one SaaS supply-chain breach reached data of roughly 200 downstream customer organizations plus a session dump of over 2,100 Azure AD token sets across 40+ tenants; a technology provider lost more than a terabyte including hundreds of thousands of national identifiers and millions of payment-card records; an airline's systems held tens of millions of passenger records",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [
   "ASI04",
   "ASI05",
   "ASI03"
  ],
  "mitre_atlas": [],
  "labels": [
   "shinyhunters",
   "vibe_hacking",
   "supply_chain",
   "extortion",
   "agentic_offense"
  ]
 },
 "defense_present": "Anthropic Usage Policy safeguards and misuse detection",
 "defense_bypassed": true,
 "fix_shipped": "Anthropic detected and banned associated accounts, deployed disruption measures and engaged authorities, partners and victims (September 2026)",
 "primary_sources": [
  "https://www-cdn.anthropic.com/e50be2e51e7695dc4b1366a37a245a597377d3b5/Anthropic-Detecting-and-countering-091026.pdf",
  "https://www.anthropic.com/threat-intelligence-report-september-2026"
 ],
 "verified_quote": "spanning more than 40 corporate tenants in about 34 hours. AI agents performed nearly all of the work.",
 "confidence": "high",
 "notes": "Anthropic September 2026 report (PDF). Multiple disparate operators assessed to be affiliates of the ShinyHunters collective; one French-speaking operator (aliases MeowSHA/frkoo/blazespider) ran a 10-worker EC2 credential-harvesting pipeline over 1.8M Android APKs. Operators also stole victims' AI API keys and switched their own attack workloads onto them. Report emphasises breaches completed in two to three hours and dozens of victims handled in parallel. Unit-of-record: one campaign cluster, not weighted by victim count per CURATION. Verified_quote begins mid-sentence because the PDF inserts a running page footer inside the sentence about the ~200 downstream customer organizations and the 2,100 Azure AD token sets.",
 "risk_category": "security_fraud",
 "risk_secondary": [
  "privacy"
 ],
 "risk_subcategory": "Supply Chain Compromise",
 "risk_sub_secondary": [
  "Credential & Secret Theft",
  "Remote Code Execution & Sandbox Escape",
  "Unauthorized Access & Account Takeover",
  "Unauthorized financial commitment",
  "Ransomware & Extortion"
 ],
 "ai_entity": "generative",
 "agency": "agent_acted",
 "agency_debatable": true,
 "agency_reason": "agentic harvesting and bulk-export automation executed intrusions; human operators directed targets",
 "vector_family": "conventional_vulnerability",
 "vector_detail": "harvested_and_exposed_credentials",
 "guardrail_kind": [
  "abuse_detection"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "ASI04",
 "agent_framework": "unknown",
 "model_provider": "anthropic",
 "model_name": "",
 "detection_mechanism": "vendor_disclosure",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "supply_chain_vulnerabilities",
 "eai_domain": "tool_misuse",
 "eai_secondary": [
  "credential_theft",
  "privilege_escalation",
  "data_exfiltration_channels"
 ],
 "eai_reason": "subcategory: Supply Chain Compromise",
 "asi_curated": [],
 "asi_scope": "in_scope",
 "asi_provenance": "rule",
 "asi_reason": "ASI04 (eai_category=supply_chain_vulnerabilities); ASI05 (vector=code_exec); ASI03 (signal=identity)",
 "submitted_by": "EAI Internal"
}