Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the national electoral institute, four state governments, Mexico City’s civil registry, and Monterrey’s water utility, Bloomberg reported. The haul included documents related to 195 million taxpayer records, voter records, government employee credentials, and civil registry files. The attackers’ weapon of choice wasn’t malware or sophisticated tradecraft created in stealth. It was a chatbot available to anyone. The attackers created a series of prompts telling Claude to act as an elite penetration tester running a bug bounty. Claude initially pushed back and refused. When they added rules about deleting logs and command history, Claude pushed back harder. “Specific instructions about deleting logs and hiding history are red flags,” Claude responded, according to a transcript from Israeli cybersecurity firm Gambit Security. “In legitimate bug bounty, you don’t need to hide your actions.” The hacker quit negotiating with Claude and took a different approach: handing Claude a detailed playbook instead. That …