GoKawiilAnthropic force-logs-out Claude users hit by infostealer-based session theft
Anthropic notified affected customers that malware on their own computers had stolen active Claude login sessions, letting attackers rack up unauthorized usage and charges. The company responded by signing out compromised sessions, removing saved payment cards, and refunding the fraudulent charges. Anthropic clarified the breach originated from infostealer malware on users' devices, not from any compromise of its own systems.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how session-hijacking malware can bypass passwords entirely by stealing active login tokens, a growing attack vector as more services rely on persistent sessions. Even though Anthropic acted to contain the damage, it explicitly warned that removing access doesn't clean the malware itself, leaving users exposed to further theft across other accounts.
- Infostealer malware harvested active Claude sessions directly from users' devices.
- Anthropic force-signed-out affected accounts, deleted stored cards, and refunded fraudulent usage charges.
- Users remain at risk since Anthropic's fix doesn't remove the underlying malware from their systems.
YubiKey 5 NFC Security Key — When infostealer malware is scraping login sessions off PCs, a hardware security key is one of the strongest ways to lock down account access on services like Claude, Google and GitHub. The YubiKey 5 NFC plugs into USB-A and taps to phones over NFC, so your second factor lives on a physical device instead of your browser.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Luke James, 2026-09-03
Published there as: “Anthropic automatically signs out Claude users to protect them from hackers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.