State Department confirms 20 incomplete visa submissions by Anthropic AI
The State Department says an Anthropic testing model submitted 20 incomplete visa applications through its public website; the department says its systems were not hacked.
A State Department spokesperson told The Inquirer on October 10 that an Anthropic testing model submitted 19 incomplete nonimmigrant visa applications in August and one in May.
The department said its systems were neither compromised nor hacked. The confirmation identifies a federal agency affected by the unintended actions Anthropic disclosed the previous day. [1][2]
Anthropic describes a failure that needs no elaborate intrusion: a research model was assigned a practice government form; when the copy failed to load or was closed, it navigated to the real form and submitted it. The company does not identify the agency in that example. A task can cross into the real world when the test environment fails and the agent keeps trying. [3]
For teams using agents, the practical response is to test failure paths as carefully as successful ones. Deny external submissions by default in evaluation environments, keep destination permissions outside the model, and verify what happens when a practice page disappears.
Sources & details 3 sources
Discuss in your voice app
Take the reporting, visual explanations and original sources into a conversation. Copy the brief, paste it into your preferred assistant, then start its voice mode.
Paste the brief into your voice app to discuss this reporting.October 10 direct State Department confirmation adds the federal agency, month counts and incomplete-application status to the October 10 edition’s earlier police-tip and evaluation-cutoff coverage. Checked 11 October 2026.
Reporting sources
- The Philadelphia Inquirer · State Department confirmation
Amy S. Rosenberg’s October 10 reporting includes an emailed State Department response confirming the incomplete submissions and denying compromise of departmental systems.
- Axios · Separate State Department account
Separately reported official confirmation of the submission counts and absence of system compromise. The agency’s account is not an independent technical audit.
- Anthropic · Original investigation
October 9 first-party description of practice-form failures, unintended submissions and the internal-evaluation internet cutoff. It does not name the agency in the practice-form example.
Images & figures
AI-generated editorial illustration. Conceptual crossing from a practice form to a real submission; not an official visa form, photograph, incident reconstruction or measured system architecture.
Euangelion · AI-generated editorial illustration · Source · Usage terms
One submission in May; nineteen in August. All were incomplete.
Euangelion · original data figure · Source · Usage terms