Anthropic's Mythos model leaked to Discord users

What changed

Discord users obtained unauthorized access to Anthropic's internal Mythos system by exploiting weaknesses in third-party integrations connected to the workspace. The intrusion exposed internal data and configuration that was never meant to be public. The vulnerability sat in the integration boundary, not the core model.

Why it matters

For engineers shipping LLM-backed services, this is a reminder that the attack surface is rarely the model itself. It is the webhook, the OAuth scope, the long-lived API key, the shared bot token, the system prompt piped into a channel a contractor still has access to. If a frontier lab can be breached this way, any team running Claude or GPT-class models inside Slack, Discord, or Linear has the same exposure profile.

What to watch for

Inventory every integration that can read or write to systems containing prompts, embeddings, or model outputs. Scope API keys per-service and per-IP, rotate anything that has ever appeared in a log line, and add egress monitoring on outbound calls from your AI infra. Review which third-party apps are installed in your workspaces and remove any you are not actively using this quarter.