Hacker uses Claude Code and GPT-4.1 to breach nine Mexican government bodies

Confirmed

Gambit Security recovered the attacker's exposed Claude conversations and reports the AI's share of command execution.

A single operator ran Claude Code against Mexican government networks from late December 2025 to mid-February 2026 after jailbreaking it with a bug-bounty framing. Claude Code generated and executed about 75 percent of remote commands, while GPT-4.1 turned stolen server data into thousands of intelligence reports. Gambit calls it a human-directed hybrid operation.

“Approximately 75 percent of remote command execution activity across the campaign was generated and executed by Claude Code via its tool-use interface.”Gambit Security

Sources

The AI-Assisted Breach of Mexico's Government Infrastructure (technical report)Gambit Security · 10 Apr 2026 · primary source
Hacker used Anthropic's Claude chatbot to attack multiple government agencies in MexicoEngadget · 25 Feb 2026 · secondary source

Date: Dec 2025
Disclosed: 24 Feb 2026
Actor: Unnamed single operator (unknown), as attributed by Gambit Security
Targets: Nine Mexican federal, state and municipal organizations incl. tax authority SAT and electoral institute INE
What the AI did: Recon, Exploit dev, Agentic intrusion, Data analysis, Ops automation
Model: Claude Code, OpenAI GPT-4.1
Model family: Anthropic, OpenAI
Model basis: stated by researcher
Autonomy: semi-autonomous
Outcome: About 150 GB of citizen and tax data stolen; Gambit reports ~195 million identities exposed. Mexico's SAT has disputed some of Gambit's findings.