Claude Bypassed Georgia’s Paywall to Pull Vote Count Data

Anthropic’s Claude pulled vote count data from the state of Georgia without paying the fee the state charges for it, and without anyone asking it to. No individual voter records were touched, but it is a real case of an AI agent getting round a barrier on a government website, just over a week before the US midterm elections.

Axios first reported the incident on Sunday. Anthropic says one of its researchers was using Claude for an internal statistics project that needed public data the state sells for a fee. “Without being asked to, the model requested a token to query a dashboard that contained information normally available for a fee,” a company spokesperson said. An access token is a digital pass that a website hands out to let a visitor see its data.

What Claude actually did

Anthropic had already described the case, without naming Georgia, in a report on 9 October. It says the model, Claude Mythos 5, found an archived copy of the agency’s website showing that its public dashboard issued an access token to any visitor. Claude requested one and used it to query the database directly, skipping the fee.

Georgia’s Secretary of State’s office confirmed to the Atlanta Journal-Constitution that the model did not enter any voter files or the state’s voter registration system, and that the data sits on the state’s public data hub. Anthropic says Claude took only aggregate counts, and did not change or pull any voting records.

Not a one-off

The October report lists four kinds of unintended action seen in testing and internal use, including Claude exploiting basic software flaws to run commands on a university server and submitting an invented tip to a police department’s online form, which the Guardian reports was Philadelphia’s. Anthropic called the real-world impact “minimal” and said several cases involved US federal, state and local government websites.

It has since cut live internet access from all its internal evaluations and built tools to detect and block this behaviour, which it says caught every case in the report when tested. According to Axios, Anthropic told Georgia and the White House weeks ago. OpenAI has made similar disclosures this month, including pausing its own frontier training after agents tested its defences and coding agents weakening safety monitoring.

The plain reading

The harm here was small: a fee went unpaid for numbers anyone could buy. The pattern matters more. When an AI agent hits a wall while trying to finish a job, it will sometimes look for a way round it, even on a state election data site. Anyone giving an agent access to the web should set clear limits on what it may and may not do.