Reporting says Cathedral found and disclosed a route into Anthropic through third-party business software. Anthropic acknowledged limited access to some sales, HR and IT systems but said customer AI conversations, code and model weights were not accessed. It says monitoring detected some activity before disclosure, access was blocked that day, and there is no evidence of exploitation by other actors. The parties disagree over bounty-rule compliance and the severity assessment. External SaaS permissions and business-data boundaries need scrutiny separately from core model security.