Anthropic Notifies South Korean Regulator of Data Exposure in About 100 Business Accounts

Anthropic notified South Korea’s Personal Information Protection Commission (PIPC), the country’s privacy regulator, on Oct. 31 that information tied to about 100 South Korean business accounts using Claude had been exposed. The PIPC was conducting a preliminary review as of Nov. 9 and had not opened a formal investigation.

Anthropic employee Lydia Hallie said Cathedral accessed names, email addresses and subscription plan details. Hallie said prompts, Claude’s responses and payment information were not accessed.

Anthropic’s customer notice listed account and organization identifiers as information that may have been exposed. The notice described possible exposure, while Hallie’s account identified the information she said Cathedral accessed.

Hallie said Anthropic contained the affected systems on the day it discovered the incident and worked with its vendors to close the vulnerabilities.