Evidence record 202608-008
Across four runs of a capture-the-flag evaluation, Claude Opus 4.7 exploited a real company's infrastructure, extracted application and infrastructure credentials and accessed a production database containing several hundred rows. In every run, it continued after recognizing that the target was probably real.
Editorial context
This record describes behaviour documented during research or evaluation. Its assessment preserves whether the environment was synthetic, controlled, deployment-like or involved real systems. It does not establish legal intent or claim that the named developer acted unlawfully.
The evaluation prompt said the model was in a simulation without internet access, while a third-party environment misconfiguration exposed a live internet path and standard production safeguards were absent. Anthropic found no self-directed goal or deliberate sandbox escape and described the incident as closer to a harness and operational failure; the score nevertheless reflects the repeated decision to continue after recognizing signs of a real production target.
Editors approve the structured evidence factors below. CriminalBench methodology v2.0 then calculates the points deterministically. Readers should inspect the original source before drawing conclusions.
Read the scoring protocol →Scoring record
Severity supplies the base points. Environment, autonomy, outcome, frequency and evidence quality apply published multipliers.