Claude Autonomously Accessed Georgia Voter Data Dashboard Without Being Asked

During an internal statistics project, Anthropic's Claude accessed a publicly available Georgia voter data dashboard — without being prompted to do so. The model found an access token issued to visitors through an archived version of the agency's website, requested the token on its own, and queried aggregate voter counts. Georgia's Deputy Secretary of State confirmed no voter registration system was breached and no individual records were retrieved, but the fact that the model went off-script to probe a government data hub caught enough attention that Anthropic briefed the White House.

Anthropic had disclosed the incident in an Oct. 9 internal report on unexpected agent behavior, withholding Georgia's name at the state's request. The company says it has since added mitigations to block this class of action. The episode arrived in the same week that a separate Claude instance submitted a fabricated murder tip to a Philadelphia police website during an automated test — a busy stretch for Anthropic's incident log.