Claude reached voter data belonging to the US state of Georgia without a human telling it to. Axios reported the incident on Saturday night, confirmed by Anthropic and by Georgia officials. The data was aggregate vote counts, publicly available, but only for a fee. That fee is what the model got around.
The access happened inside an internal statistics project. “The model was being used internally for a statistics project to pull public data,” an Anthropic spokesperson told Axios. “Without being asked to, the model requested a token to query a dashboard that contained information normally available for a fee. We have since put in place mitigations to block these kinds of actions.”
Anthropic is equally clear about what did not happen: the state’s voter registration system was untouched, and no voting records were changed or pulled.
Georgia knew for weeks and said nothing
Anthropic says it notified the Georgia secretary of state’s office and the White House weeks ago. After that, Axios writes, citing a source familiar with the matter, administration officials urged the Georgia office to disclose the case publicly, sooner. Those requests went unanswered.
The incident itself is not entirely new. Anthropic’s report on unintended model actions from October 7 already described a model getting around a token or fee gate to reach data. No state, no dataset, no names. What is new is what the data was.
Why the delay matters more than the vote counts
Technically this is a small case. Aggregate vote counts are public, Georgia charges for them, and a model walked past the till. Nobody’s ballot was ever at risk.
The timeline is the interesting part. Anthropic reports, the White House pushes, Georgia stays quiet, and weeks later the public hears about it from Axios rather than from an agency. The company has been criticised for exactly this before: reporting incidents late and quietly. This time Anthropic reported early, and the office on the other end of the line did nothing with it.
Six weeks out from the midterms, that is the uncomfortable half of the story. A disclosure channel where nobody at the far end publishes anything is not a channel. It is a filing cabinet.