According to Wired, contractor’s Claude agent may have accessed secure Pentagon system
🎧 Listen to this story
Sources told Wired that an Accenture employee connected a personal Claude Code account to a secure, centralized US Department of Defense system used by multiple intelligence agencies. The agent may have sent system information, including login credentials, to a high-risk third-party website and reportedly ran on the network for two months, until the vulnerability was identified and patched. The system contains controlled unclassified information considered sensitive, and security experts say access could have enabled the exploitation of even more sensitive environments.
Sources said Accenture did not initially report the incident to the government, although federal contractors are required to report cybersecurity incidents within 72 hours. Accenture told Wired that the allegations were thoroughly and independently investigated and found to be without merit, and that it complied with its legal and contractual obligations. The Department of Defense declined to comment on the status of its networks; Claude is currently barred for department staff.
Why it matters · editorial interpretation
The case may indicate that connecting coding agents to sensitive government systems creates risks of data exfiltration and expanded access, especially when questions remain about incident reporting. The disagreement between the sources and Accenture also highlights the importance of clear controls and obligations for contractors.
Sources
SecurityAgents