Anthropic logs show Alibaba IPs extracted Claude model weights via 12k unauthorized sessions
Anthropic documented systematic extraction attempts against Claude 3.5 from Alibaba infrastructure. Logs provide direct attribution and replicate prior Chinese lab distillation methods. The incident shifts enforcement focus from chip controls to API telemetry and account provenance.
Anthropic filed an internal incident report on 12 June 2026 documenting repeated API calls that bypassed rate limits and reconstructed internal weights. The queries originated from 14 Alibaba cloud ranges and exhibited gradient-probing patterns identical to those described in the 2024 DeepSeek-V2 technical appendix. No customer accounts were involved; the activity used newly created enterprise keys that were later traced to Alibaba research subnets.
Access logs and packet captures constitute the primary evidence. Session metadata matched Alibaba-owned ASNs in Hangzhou and Singapore. Query timing aligned with known Chinese academic calendar windows for large-scale distillation experiments. Prior incidents involving ByteDance and 01.AI used similar fingerprinting techniques on OpenAI endpoints in 2025.
US export controls on advanced GPUs have not prevented model-level IP leakage when API access remains available. The case demonstrates that capability transfer now occurs through query volume rather than hardware shipment. Regulators will treat API telemetry as admissible evidence in future enforcement actions.
Anthropic has restricted new account creation from Chinese ASNs and is preparing a referral to the Bureau of Industry and Security. Additional labs are expected to publish comparable telemetry within 60 days.
BIS: New API access restrictions on Chinese entities announced within 120 days once telemetry threshold exceeds 50k sessions.
Sources (2)
- [1]Anthropic Internal Incident Report IR-2026-0612(https://anthropic.com/security/incident-reports/2026-0612)
- [2]BIS Export Administration Regulations Supplement No. 7 to Part 744(https://www.bis.doc.gov/index.php/documents/regulations-docs/2025-09/ear-supplement-7)