Case anthropic-gtg-16006-zhipu-distillModel & data leakUnited States
GTG-16006: Zhipu accused of cyber-focused distillation of Claude Opus through 273 accounts
Anthropic says Zhipu (Z.ai) ran a chain-of-thought extraction pipeline through 273 accounts, 770,609 exchanges in ten days, and used Claude as grader for a cyber-focused distillation campaign.
HighAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 10, 2026
- Location
- United States
- Target
- Claude Opus 4.8 and another US lab's frontier model
- Severity
- High
- Triggered by
- Zhipu AI / Z.ai (per Anthropic)
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
Anthropic says Zhipu (Z.ai) ran a chain-of-thought extraction pipeline through 273 accounts, 770,609 exchanges in ten days, and used Claude as grader for a cyber-focused distillation campaign.
Impact: Training data for a competing model extracted; cyber-specific prompts partly blocked by safeguards.
Who triggered it
Actor: Zhipu AI / Z.ai (per Anthropic)
Attribution: Anthropic attribution via proxy-network metadata; Zhipu's response not seen in sources.
Motive: Cyber capability uplift for GLM models
How it happened
Attack vector: Automated chain-of-thought extraction and data-cleaning pipelines run against Claude through fraudulent accounts
Root cause: Large-scale API access via proxies; switched to weaker-safeguarded models after cyber safeguards blocked prompts
Timeline
- 770,609 exchanges pass through the chain-of-thought cleaner in ten days
- Over 3.4 million exchanges across 17 days observed
- Anthropic publishes attribution
Response
Accounts banned; extraction classifiers, summarised reasoning and identity verification deployed.
Current status: Ongoing
Sources (open in a new tab)
- Anthropic September 2026 threat report anthropic.com
- Unite.AI summary unite.ai
Cite this case
GTG-16006: Zhipu accused of cyber-focused distillation of Claude Opus through 273 accounts. AI Threat Watch, case anthropic-gtg-16006-zhipu-distill, Sep 10, 2026. https://aithreat.io/cases/anthropic-gtg-16006-zhipu-distill/
Permanent link: https://aithreat.io/cases/anthropic-gtg-16006-zhipu-distill/