Attack
A joint advisory from CISA, the NSA and the FBI attributes large-scale distillation campaigns to six Chinese AI companies.
The advisory AA26-251A, published on 8 September 2026, mentions billions of tokens extracted from American models.
The campaigns did not steal the model weights: they went through APIs, subscriptions and proxies.
Anthropic reports around 24,000 fraudulent accounts and more than 16 million exchanges in campaigns it attributes.
According to the author, account-by-account defenses are ineffective against a campaign spread across providers.