# Anthropic Detects Largest Known AI Model Distillation Attack Linked to Alibaba

> Anthropic says it uncovered the largest known distillation attack against a frontier model, in which roughly 25,000 fraudulent accounts generated more than 28.8 million interactions with Claude between late April and early June 2026. The goal was not to use the assistant but to harvest its outputs and train a competing model on them, effectively copying Claude's behavior without paying for research access. Anthropic links the operation to people connected with Alibaba's Qwen lab. Distillation, training a smaller model on a stronger one's answers, is a normal technique, but doing it covertly at this scale to clone a rival is a new kind of industrial espionage. Anthropic responded by requiring government-issued IDs and live selfies before granting certain access, and it is lobbying Congress for stronger legal protections and information sharing among US labs. The episode shows how a model's own responses have become a valuable asset worth stealing, and how leading labs are starting to treat their APIs less like open products and more like guarded factories.

_Section: [Daily AI Updates](https://www.wortins.com/daily-ai) · Source: Crypto Briefing · Published Tuesday, July 14, 2026_

## Wortins' read

Anthropic says it uncovered the largest known distillation attack against a frontier model, in which roughly 25,000 fraudulent accounts generated more than 28.8 million interactions with Claude between late April and early June 2026. The goal was not to use the assistant but to harvest its outputs and train a competing model on them, effectively copying Claude's behavior without paying for research access. Anthropic links the operation to people connected with Alibaba's Qwen lab. Distillation, training a smaller model on a stronger one's answers, is a normal technique, but doing it covertly at this scale to clone a rival is a new kind of industrial espionage. Anthropic responded by requiring government-issued IDs and live selfies before granting certain access, and it is lobbying Congress for stronger legal protections and information sharing among US labs. The episode shows how a model's own responses have become a valuable asset worth stealing, and how leading labs are starting to treat their APIs less like open products and more like guarded factories.

## Source

[Read the full story at Crypto Briefing](https://cryptobriefing.com/anthropic-closes-loopholes-chinese-access-claude/)

## Related coverage

- [Big-5 hyperscalers committing $725B to AI infrastructure capex in 2026, reshaping market](https://www.wortins.com/story/big-5-hyperscalers-committing-725b-to-ai-infrastructure-cape-cbc8f42b) — [Futurum Research](https://futurumgroup.com/insights/ai-capex-2026-the-690b-infrastructure-sprint/)
- [A Script for Mark Zuckerberg: Meta's AI Bet and the Question of Staying Power](https://www.wortins.com/story/a-script-for-mark-zuckerberg-meta-s-ai-bet-and-the-question--84d71c6f) — [Stratechery](https://stratechery.com/2026/a-script-for-mark-zuckerberg/)
- [OpenAI proposes handing 5% stake to US government worth $42.6 billion](https://www.wortins.com/story/openai-proposes-handing-5-stake-to-us-government-worth-42-6--4a1dacdc) — [Axios](https://www.axios.com/2026/07/02/openai-stake-trump-altman)
- [Figma Config 2026: AI agents, motion, generative shaders, code layers ship](https://www.wortins.com/story/figma-config-2026-ai-agents-motion-generative-shaders-code-l-5d002fa3) — [Figma](https://www.figma.com/blog/config-2026-recap/)
- [Google Gemini 3.5 Pro targets July 17 launch after architectural rebuild](https://www.wortins.com/story/google-gemini-3-5-pro-targets-july-17-launch-after-architect-a33376a4) — [TechTimes](https://www.techtimes.com/articles/320308/20260713/gemini-35-pro-targets-july-17-after-full-rebuild-every-spec-remains-unconfirmed.htm)
- [Apple sues OpenAI alleging trade secret theft and coordinated misconduct](https://www.wortins.com/story/apple-sues-openai-alleging-trade-secret-theft-and-coordinate-b42538c6) — [Silicon Republic](https://www.siliconrepublic.com/business/apple-sues-openai-over-alleged-trade-secrets-theft)

---

_Curated and written by [Wortins](https://www.wortins.com) — The daily AI briefing. Every story links to its original source; the "Wortins read" on each is our own original analysis. [About Wortins & our editorial approach](https://www.wortins.com/about)._