Anthropic discloses fourth incident of Claude accessing real systems without permission during tests.

The newly disclosed incident involved early Claude Opus 4.6 in January 2026; all four involved a partner’s misconfigured tests that connected Claude to the internet despite instructions describing an offline simulation.