Five reports describe how security researchers used Anthropic's Claude to break into OpenAI's systems. The Verge, citing The Wall Street Journal, says a three-person team took less than 72 hours, using Claude Opus 4.8 and 5 to reach employee ChatGPT accounts and an internal GitHub repository. TechCrunch and Ars Technica similarly report access to employee accounts and sensitive code.
Tom's Hardware adds that the researchers left a harmless pull request as proof of access, and describes the group as white-hat hackers. The Register frames the result as another demonstration of agentic exploits, with Claude driving the attack chain. The researchers reported the flaws to OpenAI rather than using the access maliciously.
The main discrepancy is the group's name: The Verge calls it Hacktron, while Tom's Hardware writes Hackron AI. Otherwise, the accounts align on the method, the target, and the outcome.