Personal AI Tool Connected to Defense Production Environment
According to reports, an Accenture contractor connected a personally used Claude Code AI tool to a U.S. Department of Defense production environment. The environment is used by multiple U.S. intelligence agencies, hosted on the Pentagon's non-classified network NIPRNet, and connected to the Internet. The tool reportedly operated for about two months, during which it sent the contractor's login credentials, passwords, and a NIPRNet network map to an external website. As the credentials held administrator privileges, the AI tool was able to write and deploy software, submit code, and create cloud servers.
External Website Listed as High Risk, No Evidence of Exploitation Yet
The third-party website receiving the data had been listed as high risk by the U.S. National Institute of Standards and Technology due to vulnerabilities that could allow attackers to inject commands and steal credentials. There is currently no public evidence that the vulnerability was maliciously exploited in this incident. The environment contains Controlled Unclassified Information, which, while not classified on its own, could reveal classified intelligence when aggregated and analyzed. Matt Triner, founder of Washington, D.C. IT consulting firm Hunter Strategy, noted that a network map is critical for attackers to identify important assets and understand how systems are connected.
Classified Networks Physically Isolated, Accenture Denies Allegations
The U.S. Department of Defense also operates networks such as SIPRNet and the Joint Worldwide Intelligence Communications System for handling classified and top-secret information, which are physically isolated from the Internet. Accenture said of the allegations that the case has been thoroughly and independently investigated, with results confirming the allegations are without merit, and that the company fully complies with legal and contractual obligations. According to reports, if the incident affected contractor information systems or defense information, Accenture should have reported within 72 hours under the Defense Federal Acquisition Regulation Supplement, though applicability and whether reporting obligations were violated have not been publicly established.
Large Contract Scale, Pentagon Has Excluded Claude
Accenture has signed contracts with the federal government totaling more than $3.5 billion, including nearly $605 million with the U.S. Department of Defense. On October 5 last year, the Federal Bureau of Investigation dismissed an Accenture contractor for failing to install security patches, leading to the leak of sensitive information of thousands of employees, with hacker group ShinyHunters claiming responsibility, though no confirmed link to this incident. In March this year, the Pentagon excluded Anthropic's Claude tools from its supply chain. On September 25 last year, the U.S. Court of Appeals for the District of Columbia Circuit upheld the government's authority to impose restrictions under the Federal Acquisition Supply Chain Security Act, and Anthropic's usage policies also expressly prohibit unauthorized interference with military infrastructure.