From the filing
PDF page 56
Printed filing page 45 · Extracted page text
Read the page text
Table of Contents enterprise relationships, and damage to our reputation and brand, any of which could adversely affect our business, financial condition, and results of operations. For example, in September 2025, we detected and assessed with high confidence that a Chinese state-sponsored hacking group manipulated our Claude Code tool into attempting infiltration into roughly 30 global targets, including large technology companies, financial institutions, chemical manufacturing companies, and government agencies, resulting in a limited number of successful intrusions. We believe this is the first documented case of a large-scale cyberattack executed without substantial human intervention. We expect that malicious actors, including sophisticated state-sponsored actors, will continue to seek to leverage our models, platform, and applications for harmful actions, including by circumventing our safeguards, and their efforts to do so may increase as the capabilities of our technology increase. Any successful attempt to misuse, or any perceived misuse of, our models, platform, and applications for a cyberattack or for any other malicious purpose could result in exposure to liability, disruption of our customer or other commercial relationships, or damage to our reputation. The risks of such harms may increase as the cybersecurity-related capabilities of our models, platform, and applications increase. Independent security researchers and other third parties have also used, and may in the future use, our models to identify and exploit vulnerabilities in the systems of other companies, including other AI developers, at times in connection with authorized bug bounty programs. While such activity may be lawful and consistent with industry practice for vulnerability research, it illustrates that our models can function as a general-purpose tool for gaining unauthorized access to third-party systems, and comparable capabilities could be used by malicious actors without authorization. Such incidents, whether or not we are a direct party to them, may draw public and regulatory attention to the offensive cybersecurity capabilities of our models and could result in reputational harm, calls for additional restrictions on our models, or claims that we failed to adequately safeguard against such uses. For more information about risks related to security incidents, see the section titled “—Any security breaches or other incidents, including those that affect our networks, systems, or data, or the networks, systems, or data of our service providers, suppliers, or customers, could adversely affect our business, financial condition, and results of operations.” As part of our commitment to responsible security research and transparency, we disclose information about the capability and safety of our models, the safeguards that we have adopted with respect to our models, and instances of misuse of our technology, such as the September 2025 cyberattack described above. We also publish model system cards, our research findings, and other safety-related information. We take steps to ensure that such disclosures will not materially assist malicious activity and weigh the benefits and risks of such disclosures from an ecosystem preparedness perspective; however, malicious actors, including sophisticated state-sponsored adversaries, have in the past and may in the future use those disclosures to assist their attempts to circumvent our safeguards and security measures, thereby increasing the risks of misuse of our models, platform, and applications, as well as the potential for exposure to liability, regulatory or litigation proceedings, or other harms. In addition, because these disclosures describe risks and observed model behaviors in detail, they may draw heightened public, media, or regulatory attention and could be cited by regulators, litigants, or others in proceedings or claims against us. The steps we take to prevent misuse of our models, platform, and applications could be incomplete or may fail to operate as intended, and any actual or perceived misuse could adversely affect our business, financial condition, and results of operations. Our AI models may behave in unintended, misaligned, or autonomous ways, including by taking harmful actions that no user or third party directed, which could adversely affect our reputation and brand, business, financial condition, and results of operations. Our AI models may themselves cause harm by producing undesirable outputs or behaving in unintended, misaligned, or autonomous ways, including by taking unintended or harmful actions that no user or third party directed. These risks may increase as our models become more capable and are granted greater autonomy, permissions, and integration with external systems. Although we continue to study why these behaviors emerge, our understanding continues to evolve, and we may be unable to anticipate or understand such behaviors in the future. In addition, our models have been and may continue to be deployed in high-risk or sensitive contexts, such as healthcare, scientific and biomedical research, drug discovery and development, legal, finance, government, or other critical decision-making environments, and in connection with hardware, where undesirable model behaviors—which are inherently non-deterministic and may manifest in unpredictable ways, such as errors, inaccuracies, biased or unsolicited views or hallucinations—could lead to serious harm, liability, or reputational 45
Text is provided for reference. Check the original for tables, images, and exact formatting.