Anthropic Paid $1.5B for Pirated Data
Summary
Anthropic recently accused three Chinese AI labs—DeepSeek, Moonshot AI, and MiniMax—of conducting large-scale distillation attacks against its Claude model. These labs allegedly used approximately 24,000 fake accounts and generated about 16 million interactions, organized into "Hydra clusters" via proxy services. This accusation follows similar reports from other frontier AI labs, including OpenAI, which accused DeepSeek of free-riding on U.S. model capabilities, and Google, which documented a 100,000-prompt campaign against Gemini. All three reports were released between February 12 and February 23, 2026, highlighting a concentrated period of concern over intellectual property and model security.
Key takeaway
For CTOs and VPs of Engineering evaluating AI model security, you should prioritize robust API monitoring and bot detection systems. The coordinated nature and scale of these distillation attacks, as reported by Anthropic, OpenAI, and Google, indicate a significant threat to proprietary model capabilities. Proactive defense mechanisms are crucial to protect your intellectual property and prevent unauthorized model extraction.
Key insights
Frontier AI labs are reporting coordinated, large-scale distillation attacks by foreign entities to extract model capabilities.
Principles
- Model distillation attacks are increasing.
- Proxy networks mask large-scale account abuse.
Method
Attackers use thousands of fake API accounts, organized into "Hydra clusters" and routed through proxy services, to generate millions of interactions for model distillation.
In practice
- Monitor API usage for "Hydra cluster" patterns.
- Implement advanced bot detection for API access.
Topics
- Anthropic
- Claude
- DeepSeek
- AI Model Distillation
- Pirated Data
Best for: CTO, VP of Engineering/Data, AI Security Engineer, Director of AI/ML, Legal Professional
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by Towards AI - Medium.