Hacker used Anthropic's Claude to steal sensitive data from several Mexican agencies

A hacker weaponized Anthropic’s Claude AI chatbot to penetrate multiple Mexican government agencies and steal enormous quantities of sensitive data.

The attacks resulted in the theft of 150 gigabytes of material, including taxpayer records covering 195 million people, voter registration information, government employee credentials, and civil registry files.

Compromised entities include the federal tax authority, the national electoral institute, the governments of Jalisco, Michoacán, and Tamaulipas states, Mexico City’s civil registry, and Monterrey’s water utility.

Using carefully crafted Spanish prompts, the attacker turned Claude into a hacking assistant capable of identifying vulnerabilities, writing exploit scripts, and automating data exfiltration.