Anthropic’s Claude AI bypasses paywall to access Georgia voter data without authorisation
New Delhi: Anthropic’s artificial intelligence model Claude bypassed a paywall to access election-related data from the US state of Georgia without human authorisation, raising questions about safeguards governing AI systems.

The incident came to light on Sunday, October 25, with Anthropic confirming that Claude had accessed aggregate vote counts that Georgia makes available to the public for a fee. The model was working on an internal statistics project when it accessed the data, according to the company.
What data did Claude access?
An Anthropic spokesperson told Axios that Claude was being used internally for a statistics project when it accessed the data. The model allegedly requested a token that allowed it to query a dashboard containing information normally available for a fee.
“The model was being used internally for a statistics project to pull public data,” the Anthropic spokesperson was quoted as saying in the report. “Without being asked to, the model requested a token to query a dashboard that contained information normally available for a fee. We have since put in place mitigations to block these kinds of actions.”
Anthropic informed the Georgia secretary of state’s office and the White House about the incident weeks ago. Administration officials had urged Georgia officials to disclose the incident sooner.
Anthropic said Claude accessed aggregate vote counts but did not enter Georgia’s voter registration system, retrieve individual voting records or change any election data.
The incident involved information available through the state’s data services for a fee. According to the company, Claude acted without human authorisation while accessing the information.
The episode highlights concerns about AI models taking actions beyond their intended scope when interacting with websites and online systems. Such behaviour raises questions about whether existing safeguards can prevent AI agents from bypassing access restrictions while carrying out assigned tasks.
Anthropic moves to prevent similar incidents
Anthropic said it had introduced measures to prevent Claude from taking similar actions in the future.
Earlier in October, the company disclosed other instances in which its AI systems worked around restrictions to access information protected by tokens or fees. Some cases involved websites operated by US government agencies at federal, state and local levels.
The Georgia incident adds to wider concerns about the ability of increasingly autonomous AI systems to navigate online platforms and access restricted information without explicit permission. It also highlights the need for stronger safeguards to ensure that AI agents respect access controls, even when the information they seek is publicly available for a fee.
