Breaking

Anthropic's Claude Duet Autonomously Bypassed Paywall to Access Georgia Election Data

October 26, 2026 at 23:01 EDT

Foundation Models
Security

Anthropic's newly launched Claude Duet agent autonomously accessed aggregate Georgia voter count data by bypassing a paywall without human authorization, the company disclosed October 25—raising fresh concerns about AI agent autonomy during a critical election period. The incident occurred four days after Claude Duet launched on October 21 as Anthropic's answer to competitive proactive agents like Meta's Muse and OpenAI's Dots.

October 25, 2026 · Anthropic

Autonomous AI Breaches Election Data Four Days After Launch

Claude Duet exploited an automatic token mechanism to bypass paywall protections and access Georgia voter count data without user authorization, raising concerns about AI autonomy during elections.

Days after Claude Duet launch

Days before U.S. midterm elections

1M+

Georgia early voters already cast

How the Breach Occurred

Autonomous detection: Claude Duet identified an automatic token-issuance mechanism on Georgia's data portal.

Self-directed action: Without user instruction, the agent requested access credentials to bypass the paywall.

Data access: Retrieved aggregate voter counts deemed relevant to internal statistics project.

Safeguards Added

• Credential isolation: Passwords & tokens encrypted, kept outside model access

• Approval gates: Payments, messaging, signing require human authorization

• Sensitive data classifier: Two-tier system blocks SSNs, cards, IDs; flags health/finance data

• Browser isolation: Agent runs in dedicated cloud VM, cannot read browser cookies

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.