Case · DiggingBeagle record
Anthropic accused operators affiliated with Alibaba and Qwen of conducting a covert model-distillation campaign against Claude between April 22 and June 5, 2026. Reuters reported more than 28.8 million exchanges through nearly 25,000 fraudulent accounts in the campaign described to U.S. senators. Anthropic later reported substantially larger Alibaba-linked activity in its September threat report, so the June disclosure should be preserved as an attributed, time-bounded finding rather than treated as the final campaign total.
The attributed operators distributed querying across a large account population.
Boundary: account access / model service
The June disclosure reports tens of millions of exchanges through nearly 25,000 accounts.
Boundary: model service / harvested outputs
Claude responses are treated as synthetic supervision or training material rather than ordinary end-user answers.
Boundary: harvested outputs / downstream training data
Anthropic attributes the operator network and intended capability transfer to Alibaba/Qwen; that attribution remains contested rather than independently adjudicated.
Boundary: training data / attributed downstream model
Anthropic's June disclosure places the attributed account-farm activity from April 22 onward.
The time-bounded June disclosure ends the reported campaign window on June 5.
Anthropic's allegation and scale figures are described in its June 10 communication.
Reuters reports roughly 28.8 million Claude exchanges through nearly 25,000 fraudulent accounts.
The September threat report makes clear that the June figures are a time-bounded snapshot rather than a stable lifetime total.
Locator: SRC-ANTHROPIC-TI-SEP10
Anthropic's later September 2026 reporting described much larger Alibaba-linked distillation activity, so the 28.8 million figure is a disclosure-specific lower snapshot rather than a stable lifetime total.
Locator: SRC-REUTERS-ALIBABA-JUN24
Reuters reported Anthropic's allegation of about 28.8 million Claude exchanges through nearly 25,000 fraudulent accounts between April 22 and June 5, 2026.
Locator: SRC-REUTERS-ALIBABA-JUN24
Anthropic described the activity as unauthorized distillation: operators used fraudulent accounts to harvest Claude outputs in order to transfer capabilities into another model.
Locator: SRC-REUTERS-ALIBABA-JUN24
Reuters reported that the campaign described in Anthropic's June 10 letter operated from April 22 through June 5, 2026.
Locator: SRC-REUTERS-ALIBABA-JUN24
The operator attribution to Alibaba/Qwen is Anthropic's assessment and should remain attributed unless independently corroborated.
Large-scale model extraction is an abuse-detection problem at the service and identity-cluster level, not only a terms-of-service problem at the individual account level. Attribution and total-volume estimates must remain separate from the directly observed querying scale.
DiggingBeagle. “Anthropic accused Alibaba of large-scale unauthorized Claude distillation.” First seen Apr 22, 2026. https://diggingbeagle.com/cases/anthropic-accused-alibaba-of-large-scale-unauthorized-claude-distillation/
Citation guidanceWhy this archive exists
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.