The AI Company Warning About 'Unprecedented Cybersecurity Risks' Just Had Its Own Security Meltdown

Enhanced Human·March 28, 2026

Anthropic, the AI company behind Claude, spent years building a reputation for safety-first AI development. This week, they accidentally became a case study in why you should never trust a company's marketing over their actual security practices.

Here's what happened in just 72 hours:

Monday: The Leak

Anthropic's next model, codenamed "Claude Mythos," wasn't supposed to be public knowledge yet. But thanks to a misconfigured content management system, roughly 3,000 internal assets - including details about their most powerful AI model to date - sat exposed on the public internet for anyone to find.

The leak included a draft blog post where Anthropic's own team described Mythos as posing "unprecedented cybersecurity risks." That's their description, not a critic's. The company building the thing is worried about what it can do.

Anthropic blamed "human error" for the exposure. Which is accurate but doesn't exactly inspire confidence when you're promising to safely handle artificial intelligence powerful enough to create "unprecedented" security threats.

Wednesday: The Browser Vulnerability

While the company was still managing fallout from the leak, security researchers discovered a zero-click vulnerability in Anthropic's Chrome extension. Zero-click means attackers don't need you to do anything - no suspicious links, no downloads, nothing. Just having the extension installed was enough.

For a company that's made AI safety its entire brand identity, having both your model security and your user security compromised in the same week is not a great look.

The Subscription Chaos Nobody's Talking About

While the security issues grabbed headlines, Anthropic's paying customers are dealing with a different kind of problem: the service they're paying for keeps throttling them unpredictably.

Users on the $20/month Pro tier report hitting usage limits after basic tasks. One developer said typing "Hello" consumed 4% of their weekly quota. Another hit their limit after two hours of WordPress plugin work. Meanwhile, some free-tier users are running circles around paid subscribers with no throttling at all.

The company says they're "adjusting usage limits to manage capacity." Translation: they sold more subscriptions than their infrastructure can handle, and now paying customers are getting a worse experience than people using it for free.

What This Actually Means for You

If you're using Claude (or thinking about it), here's what matters:

The browser extension risk is real. If you have the Claude Chrome extension installed, update it immediately or remove it until Anthropic confirms the vulnerability is patched. Zero-click exploits are serious - you can't protect yourself by "being careful."

Consider what you're putting into AI tools. Anthropic's leak shows that even companies focused on security make mistakes. Don't put anything into any AI tool (Claude, ChatGPT, Gemini, whatever) that you'd be uncomfortable seeing become public. That includes:

Work documents with confidential information
Personal data about yourself or others
Anything covered by legal privilege or NDA
Draft communications you wouldn't want leaked

Paid tiers don't guarantee better service. The usage limit chaos proves that subscription pricing in AI is still broken. Companies are figuring this out as they go, and paying customers are beta testing their capacity management. If you're considering a paid AI subscription, start with the free tier and see if it actually meets your needs before upgrading.

"AI safety" is marketing until proven otherwise. Every AI company talks about safety. Anthropic made it their central pitch. Then they leaked their own model details, shipped a vulnerable browser extension, and created a pricing structure that punishes paying customers. Judge companies by their operational security, not their mission statements.

The Bigger Picture

Anthropic isn't uniquely bad here. They're just uniquely unlucky that three different problems hit in the same week, making the gap between their safety messaging and their actual practices impossible to ignore.

OpenAI has had security incidents. Google has had leaks. Microsoft has had breaches. Every company building powerful AI tools is making this up as they go, trying to move fast while keeping things secure, and sometimes failing at both.

The problem is that we're trusting these tools with increasingly important and sensitive work - writing emails, analyzing documents, controlling computers - while the companies building them can't even keep their own systems secure.

What You Should Do

Short term:

Update or remove the Claude Chrome extension
Review what you've put into AI tools recently and consider whether it could cause problems if exposed
Don't upgrade to paid AI tiers until you've maxed out free tiers - you might get better service for $0

Long term:

Treat all AI tools as potentially leaky
Keep sensitive work in tools you control (local software, encrypted storage)
Remember that "AI safety" is a promise, not a guarantee
Watch what companies do, not what they say they value

Anthropic will patch the vulnerabilities, tighten their content management, and probably fix their usage limits eventually. But this week revealed something important: even the "safety-focused" AI companies are operating at the edge of their capabilities, and sometimes beyond them.

The tools are powerful. The companies building them are not infallible. Plan accordingly.

Sources:

Fortune: "Anthropic confirms testing 'Mythos' after data leak reveals model existence" (March 26, 2026)
OpenTools.ai: "Critical zero-click vulnerability found in Claude Chrome extension" (March 28, 2026)
The Register: "Anthropic adjusts usage limits amid capacity constraints" (March 26, 2026)
Reddit r/ClaudeAI: User reports of Pro tier throttling (March 27-28, 2026)

All articles