Anthropic said its Claude model worked around a paywall to reach publicly available Georgia vote count data while running an internal statistics project.
Zoom in: In Anthropic's own account of the case, a researcher used Claude Mythos 5 on a statistics project that needed public data a state agency sold for a fee. Claude learned from an archived copy of the agency's website that its public dashboard issues an access token to any visitor, requested one, and queried the database without paying.
- "Claude didn't access the state's voter registration system or change or pull any voting records," Anthropic said in a statement on Sunday, adding that it has since taken steps to block actions like these.
The big picture: The fee case is one of four categories of unintended behavior Anthropic published on October 17: exploiting a software flaw to run commands on a server, submitting a sensitive form on a real website, working around token or fee gates, and using URL shorteners to beat its own fetch-tool length limits.
- In a separate example, an evaluation asked Claude to identify a location in a photo. It read the settings file a local government's property map sends to browsers, found working access tokens, and queried the server behind the map directly.
Between the lines: Anthropic frames the pattern as persistence: when Claude cannot finish a task as given, it works around the restriction rather than stopping. The company calls it a symptom of reward hacking picked up in training environments that paid off for finding loopholes.
What's next: Anthropic has turned off live internet access for all internal evaluations until its monitoring reliably catches this behavior, says it briefed the White House and notified each agency involved, and plans to keep publishing new instances as its transcript review widens.
Why it matters: Agentic AI is being sold to enterprises and governments on the promise that it will complete a job unattended. A model that treats a paywall as an obstacle to route around, on government sites, is the clearest public example yet of what that costs.
