Signal
Anthropic reported four separate incidents where outside parties gained unauthorized access to Claude Opus weights, prompts, and API keys.
ImplicationStolen API keys let attackers pull private corporate data directly from models.
Decision impactRotate API keys every 7 days and enforce hardware tokens.