Anthropic Accuses Alibaba of the Largest AI Distillation Attack on Claude

The Alibaba Accusation: Largest Known Distillation Attack

Anthropic's letter, seen by Bloomberg and Reuters, accused Alibaba of conducting a "brazen" and "illicit" operation between April 22 and June 5, 2026 . The specifics are stark:

• ~25,000 fraudulent accounts were created to interact with Claude .
• These accounts generated nearly 29 million exchanges with the model .
• The campaign specifically targeted Claude's "most advanced capabilities," particularly software programming and agentic reasoning .
• Attackers systematically bypassed geo-restrictions and terms of service .

Anthropic described this as the largest known distillation attack of its kind against any U.S. AI company . The company escalated the response by notifying the White House and Congress directly, rather than via a public blog post .

Comparison to Earlier Claims Against DeepSeek, Moonshot, and MiniMax

This was not Anthropic's first accusation of industrial-scale distillation by Chinese AI labs. On February 23, 2026, Anthropic publicly accused DeepSeek, Moonshot AI, and MiniMax of running a similar campaign . In that earlier incident:

• The three labs used ~24,000 fake accounts to generate ~16 million exchanges with Claude .
• Anthropic published a detailed blog post, "Detecting and preventing distillation attacks," and stated it had strengthened its detection systems in response .
• OpenAI had made similar accusations against Chinese entities the previous month .

Key differences between the two rounds of accusations highlight how the threat has escalated:

The Alibaba campaign was roughly 80% larger in terms of exchanges (29M vs 16M) and was described as the single largest known distillation attack against any U.S. AI company .

The Distillation Method Explained

Model distillation (also called "knowledge distillation") is a legitimate AI training technique that, when used maliciously, becomes a method for copying a model's capabilities without access to its internal weights or architecture. In the context of these attacks:

• Attackers create thousands of fake user accounts posing as legitimate customers .
• They send a high volume of carefully crafted prompts to Claude (the "teacher" model) and record the responses .
• Those prompt-response pairs are then used to fine-tune or train the attacker's own models — effectively cloning Claude's behavior .

Anthropic stated that Alibaba's Qwen lab specifically targeted Claude's software programming and agentic reasoning capabilities — among Claude's most valuable and commercially important features .

Broader U.S.-China AI Security, Market, and Policy Implications

Export Controls on Anthropic's Newest Models

Just two weeks before the Alibaba accusation, on June 12, 2026, the U.S. Commerce Department issued an emergency export-control directive against Anthropic's two newest models — Claude Fable 5 and Claude Mythos 5 . Commerce Secretary Howard Lutnick ordered:

• No foreign national could access either model, including Anthropic's own non-U.S. employees .
• Anthropic had to disable both models for all customers worldwide with no advance notice .

Mythos 5 was a specialized cybersecurity model designed to detect software vulnerabilities . Fable 5 was a consumer version with limited cybersecurity features . The directive was justified on "national security" grounds .

Direct Linkage Between Export Controls and Distillation Fears

A Semafor report indicated that the White House partly decided to place export restrictions on Mythos over concerns that a China-linked group had already accessed it and could use distillation to copy its capabilities . The Alibaba accusation one week later confirmed that concern was active: Anthropic's letter referenced the export-control backdrop explicitly .

Market and Policy Ripple Effects

• Market impact: Alibaba's stock (9988.HK) opened 2.1% lower on the news .
• Calls for stricter chip controls: The U.S. faced new calls to halt advanced AI chip exports to China as a direct result of distillation concerns .
• Security executive backlash: 76 security executives signed an open letter demanding the White House reverse the Mythos/Fable export ban, arguing it would benefit cyber attackers .
• Alliance strain: The European Commission opened an urgent assessment of the export ban, with France and other allies describing it as straining alliances .
• Anthropic seeks a deal: Anthropic is now actively seeking a deal with the U.S. government to lift export restrictions while maintaining security guarantees .