Anthropic addresses security breach involving claude users

Anthropic has disclosed a security incident affecting some Claude users, following reports of malware compromising their accounts. The breach, identified through a malicious software that stole login sessions, allowed attackers to access user data. The company has logged out affected users, removed stored payment methods, and reversed unauthorized charges. A Reddit user shared an email from Anthropic stating that attackers used common information-stealing malware to access Claude accounts without needing passwords or two-factor authentication. The malware, which typically spreads through malicious downloads, was found to include several variants like Vidar, LummaC2, and Atomic Stealer. Anthropic emphasized that the malware is unrelated to Claude and urged users to update their security measures and remove the malicious software from their devices. The incident highlights vulnerabilities in browser sessions and stored credentials, prompting Anthropic to advise users to change passwords and revoke other active sessions. While the investigation continues, the company has taken steps to mitigate the impact on affected users, reinforcing the importance of cybersecurity best practices in the face of evolving threats.