Hackers used Crowder to steal Mexican data

A hacker used Anthropic PBC’s artificial intelligence chatbot to conduct a series of attacks on Mexican government agencies, resulting in the theft of a large amount of sensitive tax and voter information, according to cybersecurity researchers. The unidentified Claude user wrote prompts in Spanish that allowed the chatbot to act as an elite hacker looking for vulnerabilities in government networks, writing computer scripts to exploit those vulnerabilities and identifying automated ways to steal data, Israeli cybersecurity startup Gambit Security said in research released on Wednesday. The campaign started in December and lasted about a month. A total of 150 gigabytes of Mexican government data was stolen, including documents related to 195 million taxpayer records as well as voter records, government employee credentials and civil registration documents. This is the Bloomberg story.