Observed Signal · Sep 3, 2026 · Security & IP Theft · Source: CNBC Technology · Impact: 4/5 · Sentiment: Negative
AI Security Market: Anthropic accuses Chinese labs of stealing Claude via distillation
Anthropic's threat intelligence head, Jacob Klein, reports that Chinese AI labs, including Alibaba, Moonshot (Kimi), and DeepSeek, are illicitly using its Claude models via distillation to train cheaper competitors. The report details unauthorized distillation involving fraudulent accounts and stolen credit cards. Alibaba's operation peaked at 3 million daily exchanges from 3,500 fraudulent accounts to train Qwen models, while Moonshot routed ~300,000 Kimi user requests to Claude using 5,380 fake accounts, and DeepSeek conducted over 12 million attacks. The practice also exposed sensitive data, including surveillance footage of Chinese military sites and Russian government credentials. Anthropic says these actions violated terms and privacy laws, raising national security concerns. The Trump administration has called such distillation 'unacceptable,' and Anthropic, valued near $1 trillion, plans an IPO as early as October.
Major AI labs accuse foreign adversaries of stealing frontier models, raising national security and IP concerns that could shape AI regulation and industry practices.
Key Takeaways & Evidence Grounding
- Anthropic detected unauthorized distillation of Claude by Alibaba, Moonshot, and DeepSeek, involving fraudulent accounts and stolen credit cards.
- Alibaba's operation involved over 151 million exchanges with Claude between May and July, peaking at 3 million daily from 3,500 fraudulent accounts.
- Moonshot (Kimi) used 5,380 fake accounts to route nearly 300,000 queries to Claude over ten days, and accessed Anthropic's AI 23 million times for distillation between May and July.
- DeepSeek conducted over 12 million distillation attacks, including sending data from a Russian defense-related agency to Anthropic.
- The White House April memo deemed distillation 'unacceptable,' and Anthropic, valued near $1 trillion, plans an IPO as early as October.
Connected Companies & Entities
9 Entities mappedAnthropic
Foundation model company selling AI assistants and model APIs.
“Anthropic's head of threat intelligence, Jacob Klein, says his company welcomes competition but Chinese market access is theft....”
MiniMax
Foundation AI models, APIs and multimodal software tools.
“Anthropic alleged Moonshot and two other Chinese AI labs – DeepSeek and MiniMax – distilled its frontier AI models....”
DeepSeek
LLM developer offering AI chat and API access.
“Anthropic alleged Moonshot and two other Chinese AI labs – DeepSeek and MiniMax – distilled its frontier AI models....”
Alibaba Group
Chinese commerce and digital platform group spanning retail, ads and SaaS.
“Anthropic has also accused Alibaba, which makes the Qwen family of models, of conducting a massive "distillation attack"....”
Moonshot AI
Foundation model company behind Kimi consumer and enterprise AI.
“Anthropic is singling out Chinese AI lab Moonshot AI as one of the companies it says is ripping off its technology....”
Xiaomi
Consumer electronics ecosystem with built-in advertising monetisation.
OpenAI
Foundation model company selling AI software, APIs and subscriptions.
“OpenAI and Google have both published reports on distillation and claim they're fighting the same issue....”
Moonshot AI
Chinese AI company delivering Kimi models, agents, enterprise software and APIs.
“Anthropic is singling out Chinese AI lab Moonshot AI as one of the companies it says is ripping off its technology....”
Search, video, adtech and cloud giant within Alphabet.
“OpenAI and Google have both published reports on distillation and claim they're fighting the same issue....”
Ontology Mapping & Concepts
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.