Hackers are stealing Claude tokens from subscribers
techcrunch ·
An independent AI consultant in the UK noticed his Claude Max subscription was consuming tokens while he wasn't working. After contacting Anthropic, the company suspended his account and later determined a compromised session key was used to mint unauthorized tokens, likely stolen via infostealer malware. Other users reported similar unauthorized usage, and some received emails from Anthropic warning about a bad actor stealing login sessions. The consultant received a partial refund but remained frustrated by the lack of itemized usage details and the difficulty of getting help. He eventually canceled his subscription and switched to Cursor, saying other models work just as well. Anthropic declined to comment on how users can identify misuse.
techcrunch