# Anthropic accuses Alibaba of largest known distillation attack on Claude

> Anthropic alleges Alibaba-linked accounts ran its largest known distillation attack on Claude; Alibaba denies the unverified claim.

*The brief: Anthropic told a US Senate committee Alibaba-linked operators ran a record distillation campaign against Claude. Alibaba denies it; the figures are unverified.*

By The FeaturedDaily Desk · FeaturedDaily
Canonical: https://featureddaily.com/news/anthropic-alibaba-distillation-brief

> **Key:** **The brief:** Anthropic has accused operators affiliated with **Alibaba** of running the **largest known model-distillation attack** on Claude — ~**28.8M exchanges** via ~**25,000 fake accounts** over 44 days. The claim came in a Senate letter; **Alibaba denies it** and the figures are **unverified**.

## What happened

In a **10 June 2026** letter to the **US Senate Banking Committee**, first reported by Bloomberg, Anthropic alleged that operators affiliated with **Alibaba** and its AI lab ran what it calls the largest known distillation campaign against Claude: roughly **28.8 million model exchanges** through about **25,000 fraudulent accounts** over a 44-day window (22 April–5 June 2026). Anthropic says the effort targeted Claude's **software-engineering, agentic-reasoning and cybersecurity** capabilities in the frontier model it calls **Mythos Preview**. Sen. **Elizabeth Warren** cited it as 'the largest known distillation attack on Anthropic to date.'

> Anthropic accused operators tied to Alibaba of moving to 'brazenly' and 'illicitly' extract Claude's most advanced capabilities, describing it as the largest such campaign it has detected.
> — [CNBC](https://www.cnbc.com/2026/06/24/anthropic-alibaba-distillation-campaign.html), 2026-06-24

## The catch

These are **allegations**, and **Alibaba denies them** — the 28.8-million and 25,000 figures are unverified. Distillation trains a cheaper model on a stronger one's outputs; Anthropic's worry is that the copy gets Claude's capability without its safety training, usage policies or access controls. Anthropic frames this as an escalation of a pattern: in February 2026 it named DeepSeek, Moonshot and MiniMax, and says the alleged Alibaba campaign is larger than all three combined. The disclosure also lands the same week Anthropic faced US export-control pressure — context that colours the timing.

## What's next

Expect the dispute to run through Washington rather than a courtroom in the near term: the accusation is now part of the record before a Senate committee, and it feeds directly into the fight over frontier-model export controls and how the US treats its leading AI labs. Watch for any independent verification of the numbers, a fuller response from Alibaba, and whether lawmakers use the claim to justify tighter rules — none of which is settled yet.

## Key takeaways

- Anthropic alleges operators linked to Alibaba ran ~28.8 million exchanges through ~25,000 fake accounts over 44 days (22 April–5 June 2026) to distil Claude — its largest known such campaign. Alibaba denies it.
- The claim surfaced in a 10 June 2026 letter to the US Senate Banking Committee (reported by Bloomberg); Sen. Elizabeth Warren called it the largest known distillation attack on Anthropic to date.
- Anthropic says the target was Claude's coding, agentic-reasoning and cybersecurity skills in its 'Mythos Preview' model — and that this one campaign exceeds its three earlier cases (DeepSeek, Moonshot, MiniMax) combined.
- The figures are unverified and disputed; the disclosure lands amid US export-control pressure on Anthropic, so treat it as a serious but unproven accusation.

## FAQ

### What did Anthropic accuse Alibaba of?
Of running the largest known distillation attack on Claude — roughly 28.8 million exchanges via ~25,000 fake accounts over 44 days, targeting Claude's coding, agentic and cybersecurity skills. These are allegations, disclosed to a US Senate committee, and Alibaba denies them.

### Are the figures verified?
No. The 28.8-million exchanges and ~25,000 accounts are unverified allegations, and Alibaba denies the claim. It is a serious but disputed accusation, not a settled finding.

### What is model distillation?
Training a cheaper model on a more powerful model's outputs so it imitates it. Anthropic's concern is that a model distilled from Claude gets the capability without Claude's safety training, usage policies or access controls.

### Why does the timing matter?
The accusation surfaced in a 10 June 2026 Senate letter during a week of US export-control pressure on Anthropic, and it follows earlier claims against DeepSeek, Moonshot and MiniMax — so it is entangled with a broader policy fight over frontier-model controls.

## Sources

- [Anthropic accuses Alibaba of campaign to 'brazenly' and 'illicitly' extract AI capabilities](https://www.cnbc.com/2026/06/24/anthropic-alibaba-distillation-campaign.html) — CNBC, 2026-06-24
- [Anthropic accuses Alibaba of 'largest known distillation attack' on Claude](https://asia.nikkei.com/business/technology/artificial-intelligence/anthropic-accuses-alibaba-of-largest-known-distillation-attack-on-claude) — Nikkei Asia, 2026-06-24
- [Anthropic Says Alibaba Used 25,000 Fake Accounts To Distill Claude](https://www.forbes.com/sites/jonmarkman/2026/06/26/anthropic-says-alibaba-used-25000-fake-accounts-to-distill-claude/) — Forbes, 2026-06-26