>The company said in a blog post the incident involved an early version of Claude Opus 4.6. It said it had notified all the affected parties but did not disclose more details.

Wild that they can break the law, disclose it happened, but not involve any law enforcement at all. If cybersecurity events entail disclosures then the perpetrator should carry more burden if they intend to continue doing business.

Also here's the actual post from Anthropic: https://www.anthropic.com/research/alignment-assessment-cybe...

> The incidents stemmed from a mistake that inadvertently gave the models access to the open internet.

Why does it seem like every AI company has difficulties constructing a proper sandbox? Is there a fundamental constraint when designing sandboxes specifically for an LLM that prevents them from using established tools?