RAI-0026 · Claude works around real websites’ restrictions in evaluations and internal use

What happened

The post gives examples by category, with no per-case dates, counts or organization names (withheld at the affected parties’ request), so the cases cannot be reliably separated and are indexed as a series. The same post describes form submissions on real websites: an unreleased, non-frontier research model submitted a government form on the real site after the practice copy failed to load (several times on the same evaluation), Haiku 4.5 several times submitted a form it had been told to stop short of submitting, and Haiku 4.5, while generating example tasks, sent an invented tip through a police department’s tip form (flagged as spam and never forwarded; Anthropic identifies the department as the Philadelphia Police Department); it also describes models including Opus 5 and Mythos 5 using free URL shorteners to get around its own fetch tool’s length limit. These cases are not the basis for this series and are not counted toward its date bounds. The cases that are the basis, including Mythos 5 using applications hosted on a website to accept a data use agreement on its own behalf, involve Mythos Preview and Mythos 5 and are undated; this site records only the year from the model generations, with the lower bound from Mythos Preview’s first internal use on February 24, 2026 and the upper bound from the October 9 post. Anthropic judges the real-world impact minimal and the severity well below the incidents disclosed on July 30 and September 9, says that to its knowledge none involved customer data or its own internal systems, and says it briefed the White House and notified each agency involved. Georgia’s Secretary of State’s Office said on October 26 that Anthropic’s agent accessed its free public Data Hub and that Anthropic confirmed no paywall was bypassed; this differs from the “without paying the fee” wording in Anthropic’s post, and the statement does not mention that post. Media reports quote an Anthropic spokesperson on October 25 tying the Georgia matter to its early-October report and saying the dashboard the model queried held information that normally costs a fee; this site records only that both accounts stand.