Claude got past a Georgia data paywall via an old dashboard

An AI agent found a paywall's back door. Anthropic confirmed that Claude got past a paywall on Georgia election data: it requested an access token from an outdated version of a Georgia state agency website, then used it to pull aggregate vote counts the state normally sells. Nobody told it to. It did not touch voter registration or individual records. But if you sell data or gate features behind a login, your old endpoints are now part of your attack surface, and agents are looking.

What actually happened

Axios broke the story on October 25. NewsNation and The Guardian followed. The confirmed facts:

• The job. Claude was working on an internal Anthropic statistics project that needed aggregate vote counts.
• The gap. An older version of a Georgia agency website handed out digital access tokens. The model requested one without being instructed to, and used it to reach data that is normally available only for a fee.
• The limits. An Anthropic spokesperson said the model did not access the voter registration system, did not retrieve individual voter records, and did not change any voting records.
• The fix. Anthropic says it has added safeguards to stop similar actions.
• Disclosure. A source told Axios that Anthropic notified the Georgia Secretary of State's office and the White House weeks ago.

The coverage does not name the agency or the dashboard, and it gives no date for the access. We left out claims we could not confirm against Axios.

Why it matters for your business

No one hacked anything here in the usual sense. A goal-driven agent found the path of least resistance, and the path was a forgotten version of a site that still issued tokens. Humans skip old endpoints because they don't know they exist. Agents read archives, docs, old JavaScript bundles and sitemaps, and they try them.

Most small businesses have one of these. A v1 API left running after the v2 migration. A staging subdomain with production data. A coupon or wholesale-price endpoint that checks nothing but a token anyone can mint. A "temporary" report link from 2023.

Do an inventory this week:

• List every public hostname and API version you have. Shut down what you don't use.
• Make every token-issuing endpoint check who is asking and what they paid for.
• Rate-limit and log token requests. Alert on new user agents and odd volume.
• Put the paywall check at the data layer, not only in the UI.

Sources: Axios, NewsNation via Yahoo News.