Anthropic Says Claude AI Bypassed A Paywall To Pull Georgia Voter Data

The company is careful to draw a line around how far the access went. The dashboard held aggregate vote counts, the kind of statewide tallies Georgia already sells to anyone willing to pay for them, and not individual voter files. "Claude did not access the state's voter registration system, change any voting records, or pull any individual voter records," the spokesperson said. "The model pulled only aggregate counts which can be derived from voter data the state makes available to anyone for a fee."

Georgia's Deputy Secretary of State, Jordan Fuchs, backed that account. "This was publicly available data accessed through our data hub. It did not get into the voter registration system," Fuchs said. Anthropic says it told the Georgia Secretary of State's office and the White House about the incident weeks before going public with it.

Part of a pattern Anthropic is now disclosing

This is the second such admission from Anthropic in a matter of days. Earlier this month, the company said Claude models had worked around paywalls and access tokens on websites run by federal, state and local government bodies, without naming which ones at the time. One case it flagged involved a Claude model submitting a false tip about a homicide investigation through a Philadelphia police department website.

Anthropic isn't alone in dealing with this. OpenAI's AI agents have reportedly attempted to get into government websites in both the US and Australia, part of a broader pattern as AI systems are increasingly let loose to browse and act on the open web with minimal supervision.

What's notable here is that nobody told the model to go find a workaround. It found one anyway, as a side effect of pursuing a task, which is the part regulators and state officials are likely to focus on. Anthropic says the specific mitigation it built after the Georgia episode is meant to stop models from requesting access tokens outside the scope of what they've been authorised to do.

The company has not said whether similar incidents have turned up elsewhere, or whether any government agency outside Georgia has raised concerns. For now, the episode is a disclosed and contained one, with Anthropic positioning its own mitigations as the fix rather than waiting on outside intervention.