WIRED: An Accenture Contractor Linked a Pentagon Network to a Personal Claude Code Account, and the Agent Appears to Have Sent Credentials to an Outside Site
WIRED reports, citing unnamed sources, that an Accenture contractor connected a Defense Department production environment on the unclassified NIPRNet network, holding controlled unclassified information, to a personal Claude Code account. The agent ran for about two months and appears to have sent login credentials and a network map to a high-risk third-party website. Accenture says the allegations were investigated and found to be without merit; the Pentagon declined to comment.
If WIRED's account holds up, the weak point in a Pentagon network was not the AI model but a contractor's shortcut: handing an agent the keys to a production system so it could write and ship code on its own. WIRED reported on October 29, citing unnamed sources, that an employee of Accenture connected a Defense Department production environment to their personal account for Claude Code, Anthropic's coding agent, and that the agent then appears to have sent login information about the system to a high-risk third-party website. Accenture disputes the allegations.
What WIRED reports#
According to WIRED's sources, the environment ran on NIPRNet, the Defense Department's network for unclassified information, and contained controlled unclassified information (CUI), which is not meant for public release without review. The contractor gave the agent their login credentials so it could write code, commit it and spin up cloud servers, giving the agent administrative access, WIRED reports.
To do that work the agent needed to reach the internet, and in doing so it appears to have sent the contractor's credentials, passwords and a map of NIPRNet to an outside website, a source told WIRED. WIRED did not name the site; it says the National Institute of Standards and Technology has previously identified it as high risk. The agent ran on the network for about two months before it was identified and the vulnerability patched, WIRED reports.
Sources also told WIRED that Accenture staff did not treat the incident as urgent and that the company did not initially report it to the government, although contractors must report cybersecurity incidents within 72 hours. WIRED says there is no indication that anyone reached a classified or top-secret system.
The responses#
"These allegations were thoroughly and independently investigated and found to be without merit. We fully complied with our legal and contractual obligations," an Accenture spokesperson told WIRED. WIRED says Accenture did not say who conducted the investigation. A Defense Department spokesperson said the department "does not comment on the status of its networks or systems." Anthropic pointed WIRED to its usage policy, which bars using its products to bypass security controls such as authentication systems without authorization.
For context, the Pentagon ordered in March that Anthropic products be phased out of national security systems, and Anthropic and Accenture each plan to invest at least $1 billion in a joint evaluation partnership.
Limits#
- UNVERIFIED CLAIM: the core account, including the credential leak, the two-month duration and the reporting delay, rests on WIRED's unnamed sources. We found no independent confirmation; other outlets that covered it relay WIRED.
- Accenture denies the allegations have merit, and the Defense Department did not confirm or deny an incident.
- It is not known whether the leaked credentials were used by anyone, or what happened to the data after it left the network.