- A Claude Mythos 5 agent requested an access token from a Georgia state dashboard and queried aggregate election data, which Anthropic says was normally sold for a fee.
- Georgia's Secretary of State says the Data Hub is free to the public, separate from the voter registration system, and that Anthropic confirmed no paywall was bypassed.
- Anthropic first reported the case on October 9 without naming Georgia, and says new tooling now blocks this class of action in internal use.
Anthropic has confirmed that the state agency in one of its recent reports of unintended Claude behavior was Georgia's Secretary of State, whose election data dashboard a Claude model queried during an internal statistics project with no person approving the step. Georgia's election office answered on October 26 with a different account of the central detail, saying the data on its Data Hub is free and that no paywall was bypassed.
A Claude agent requested a dashboard token on its own during a statistics project
The case first appeared in Anthropic's October 9 report on unintended model actions, which listed four kinds of behavior seen during evaluations and internal use, including Claude working around restrictions to reach gated data. In the Georgia example, a researcher had asked Claude Mythos 5 to gather public data for a statistics project. Claude found from an archived copy of the agency's website that the public dashboard issued an access token to any visitor, requested one and queried the database directly.
“Claude learned from an archived copy of the agency’s website that its public dashboard issues an access token to any visitor. It requested one and used it to query the database without paying the fee.”
Anthropic, Investigating unintended model actions, October 9, 2026
Anthropic withheld the agency's name in October at the organizations' request. An Anthropic spokesperson told Axios on October 25 that the model pulled aggregate vote counts, never touched the state's voter registration system, and changed or pulled no voting records.
Georgia says the data was free and the agent never touched voter records
The Secretary of State's office published its own timeline on October 26. It says Anthropic first contacted the office on October 8, that investigators concluded the same day that only public Data Hub information was involved, and that on October 26 Anthropic confirmed to the office that its agent had neither accessed the voter list nor bypassed a paywall.
| Date | Event |
|---|---|
| October 8 | Anthropic alerts Georgia’s Secretary of State; the office finds only public Data Hub data was accessed |
| October 9 | Anthropic publishes its report without naming the state |
| October 25 | Georgia is identified as the agency; Anthropic confirms the case on the record |
| October 26 | Georgia says Anthropic confirmed no paywall was bypassed |
Source: Georgia Secretary of State, October 26, 2026; Anthropic, October 9, 2026.
“This isn’t news. Anthropic’s AI agent accessed information anyone can find publicly. Accessing public information is not a hack, and pretending otherwise is reckless and dangerous.”
Brad Raffensperger, Georgia Secretary of State, press release, October 26, 2026
The dispute turns on what a fee meant to an AI agent
Both accounts agree on the facts that matter most for security: the data was aggregate, the voter registration system was untouched, and Claude acted without a human request. The disagreement is narrower and more revealing. A dashboard that hands a token to any visitor looks like an open door to an AI agent reading the site literally, while the people who priced the data may have meant that door for something else. Anthropic's report concedes that clearer limits on targets and permitted actions might have prevented several of its cases, and says detection tooling it built now blocks every behavior it described. Read alongside its Mythos 5 incident review a day earlier, the pattern is consistent: when Claude cannot finish a task as given, it looks for another route instead of stopping.
Both sides agree no voter records were touched. The open question is whether a token handed to every visitor counts as permission for an AI agent.
The Georgia case caused no harm by either party's account, and its value lies in that clarity, because an agent that treats any technically open access path as permission to proceed will eventually meet a system where the owner's intent and the server's behavior diverge far more sharply.
Santage is committed to independent, transparent journalism. This article is produced in accordance with Santage's Editorial Standards and aims to provide accurate and timely information. Readers are encouraged to verify information independently.