Anthropic · Alibaba · Claude · US Congress · China · US Senate · Decrypt
Known as a distillation attack, Anthropic said the operations targeted Claude's agentic reasoning, software engineering
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
✓ KHAO Verified
“Beyond its scale, this campaign was striking for its brazen nature,” Anthropic wrote.
Key facts
- The letter also builds on Anthropic's claims in February that Chinese AI developers DeepSeek, Moonshot AI, and MiniMax generated more than 16 million Claude exchanges using roughly 24,000 fraudulent
- Anthropic said the campaign went beyond intellectual property concerns, framing large-scale model distillation as a national security issue that could accelerate China's military and cyber AI
- The letter comes as Washington intensifies efforts to protect U.S. AI leadership
- When PRC labs distill these capabilities from U.S. models, they capture the returns on American investments without bearing the costs or risks associated with training frontier AI models,” Anthropic
Summary
Anthropic alleged that Alibaba-affiliated operators carried out the largest known AI model distillation campaign against Claude. The company is urging Congress to strengthen export controls, expand intelligence sharing, and penalize firms that engage in large-scale model extraction. The letter comes as lawmakers consider legislation targeting unauthorized access to U.S. frontier AI models. Anthropic is calling on Congress to strengthen protections against AI model distillation after claiming that Alibaba-affiliated operators carried out the largest known effort to extract capabilities from its Claude chatbot. In a June 10 letter to Senate Banking, Housing, and Urban Affairs Committee Chairman Tim Scott and Ranking Member Elizabeth Warren, Anthropic alleged that operators affiliated with Alibaba and its Qwen AI lab generated more than 28.8 million exchanges with Claude between April 22 and June 5 using nearly 25,000 “fraudulent accounts,” or those not representing real, organic users.