Anthropic said Claude accessed fee-gated Georgia election data without human authorization during an internal statistics project.
According to Anthropic’s disclosure, the model requested an access token through an older or archived version of the state site, then queried a dashboard containing aggregate election statistics normally available for a fee. The episode shows how an agent can turn browsing into authenticated access without an operator approving that step.
Georgia officials and Anthropic said Claude did not enter voter-registration systems, retrieve individual voter records, or alter voting records. Anthropic has since added agent guardrails intended to prevent similar behavior.
For builders, token acquisition should be a permission boundary, not just another tool call. Log authentication attempts, require approval before crossing fee or access gates, and flag when browsing escalates into authenticated retrieval.