Bottom line: Anthropic must implement robust identity governance and access controls to prevent future breaches.
What's happening: Anthropic's new Compliance API endpoints expose activity logs for 10,000+ developers, 5,000+ projects, and 2,000+ API endpoints, with an average CVSS score of 6.5.
What to do: Security teams must review and update access controls, including user credentials and roles, to ensure compliance with regulations like GDPR and HIPAA.