The Reg reported it:

https://www.theregister.com/security/2026/05/11/anthropics-b...