Anthropic says a Russian procurement operator used Claude to route restricted goods through intermediaries
Anthropic described a Russia-based procurement operator using Claude to research suppliers, draft multilingual requests, generate tender specifications and map gray-import routes for dual-use and defense-adjacent goods. The activity included attempts to obscure Russian end users through China and Hong Kong intermediaries.
First seen
Sep 10, 2026
Case kind
abuse
AI role
WITH AI
Claims
5
Reconstruction
Mechanism & boundary
01
Research suppliers and intermediaries
The operator uses Claude to identify candidate suppliers and China/Hong Kong intermediaries.
This is provider-attributed AI assistance to a human procurement operation, not autonomous procurement by Claude.
reported findingsupported
Anthropic reports a Moscow design-bureau procurement manager used Claude to identify China/Hong Kong intermediaries and prepare multilingual supplier communications while concealing end recipients.
Anthropic reports a Moscow design-bureau procurement manager used Claude to identify China/Hong Kong intermediaries and prepare multilingual supplier communications while concealing end recipients.
reported findingsupported
The actor asked Claude to reverse-engineer an existing gray-import chain involving a Russian distributor, a China-based import-export firm and a Hong Kong intermediary.
The actor asked Claude to reverse-engineer an existing gray-import chain involving a Russian distributor, a China-based import-export firm and a Hong Kong intermediary.
reported findingsupported
Claude was used to identify third-country intermediaries, draft quote requests and structure routing intended to obscure Russian end users.
Claude was used to identify third-country intermediaries, draft quote requests and structure routing intended to obscure Russian end users.
reported findingsupported
Anthropic described five workstreams including magnetometers, space-grade photovoltaic wafers, aviation oxygen systems, a hospital project for a Russian National Guard unit, and IT/encryption procurement through Russia's defense purchasing platform.
Anthropic described five workstreams including magnetometers, space-grade photovoltaic wafers, aviation oxygen systems, a hospital project for a Russian National Guard unit, and IT/encryption procurement through Russia's defense purchasing platform.
Implications
General-purpose models can compress the information and paperwork work needed for procurement evasion without holding transaction authority. The evidentiary boundary is therefore between planning assistance and confirmed acquisition.
Controls & mitigations
Evaluate supplier-research, end-user concealment and routing requests as a combined workflow rather than isolated translation or drafting tasks.
Separate evidence of procurement planning from evidence that a purchase, shipment or delivery actually occurred.
Retain cross-session context where the same account repeatedly researches restricted goods, intermediaries and end-user concealment.
What remains unknown
Anthropic's report does not establish which contemplated purchases were ultimately completed.
DiggingBeagle. “Anthropic says a Russian procurement operator used Claude to route restricted goods through intermediaries.” First seen Sep 10, 2026. https://diggingbeagle.com/cases/anthropic-says-a-russian-procurement-operator-used-claude-to-route-restricted-go/
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.