# Anthropic accuses Alibaba of largest-ever AI distillation attack on Claude > 28.8 million fraudulent exchanges through 25,000 fake accounts extracted Claude's software-engineering and agentic-reasoning capabilities for Alibaba's Qwen lab **Meta:** type: event · date: 2026-06-24 · heads: Whose Money, What They're Not Saying · 17 takes · 6 lenses · 8 regions ## Summary [Anthropic](/en/entity/anthropic) disclosed on June 24 that [Alibaba's](/en/entity/alibaba-qwen) Qwen lab ran 28.8 million exchanges with Claude through roughly 25,000 fraudulent operator accounts between April 22 and June 5, 2026. The campaign targeted Claude's software engineering, agentic reasoning and long-horizon task capabilities, extracting them to train a rival model while stripping Claude's safety alignment. Anthropic's letter to Senators Tim Scott and Elizabeth Warren, sent June 10, called the campaign the largest known distillation attack on any US frontier lab, 80% larger by exchange volume than the combined DeepSeek-Moonshot-MiniMax cluster flagged in February 2026. Alibaba ignored a White House memo warning in April. ## Why it matters Distillation is legal arbitrage: no US statute explicitly bars querying a rival's API to train on the outputs, leaving Anthropic relying on terms-of-service enforcement. The case drives Congress toward codifying criminal penalties and gives the Trump administration a concrete predicate for tighter export controls on AI access. ## What to watch - Whether the Senate moves to legislate against distillation attacks following the letter. - Alibaba or Qwen response and whether any model capability uplift is traceable to this campaign. - Whether the FTC or DOJ open a formal investigation against Alibaba-affiliated entities in the US. --- ## Regional takes (batched by bias / lens) ### US tech financial - **CNBC** (United States, en) — Lead account of Anthropic's June 10 letter to Senators Tim Scott and Elizabeth Warren, disclosed June 24. The letter alleged Alibaba ran 28.8 million exchanges with Claude via 25,000 fraudulent accounts between April 22 and June 5, targeting software engineering, agentic reasoning and long-horizon tasks, dwarfing the earlier DeepSeek-Moonshot-MiniMax campaign. > "Alibaba ran 28.8 million fraudulent exchanges with Claude, the largest known distillation attack on Anthropic to date, targeting its most valuable capabilities." Source: https://www.cnbc.com/2026/06/24/anthropic-alibaba-distillation-campaign.html ### unlabelled - **Bloomberg** (United States, en) — Source: https://www.bloomberg.com/news/articles/2026-06-24/anthropic-accuses-alibaba-of-illicitly-accessing-its-ai-models - **Business Standard** (India, en) — Source: https://www.business-standard.com/technology/tech-news/anthropic-alibaba-dispute-puts-ai-distillation-under-spotlight-what-is-it-126062600540_1.html - **The Next Web** (Netherlands / global, en) — Source: https://thenextweb.com/news/anthropic-accuses-alibaba-distillation-claude-qwen - **Decrypt** (United States, en) — Source: https://decrypt.co/372130/anthropic-urges-congress-crack-down-ai-distillation-chinese-rivals - **TechSpot** (United States, en) — Source: https://www.techspot.com/news/112897-anthropic-accuses-china-alibaba-stealing-claude-ai-capabilities.html - **Taipei Times** (Taiwan, en) — Source: https://www.taipeitimes.com/News/biz/archives/2026/06/26/2003859739 - **Business Today India** (India, en) — Source: https://www.businesstoday.in/technology/artificial-intelligence/story/anthropic-accuses-alibaba-of-largest-ever-attempt-to-extract-claude-ai-capabilities-539087-2026-06-25 - **Dunya News** (Pakistan, en) — Source: https://dunyanews.tv/en/Technology/959267-anthropic-accuses-alibaba-of-illicitly-accessing-claude-ai-model - **Express Tribune** (Pakistan, en) — Source: https://tribune.com.pk/story/2615045/anthropic-says-alibaba-illicitly-extracted-claude-ai-model-capabilities - **Japan Times** (Japan, en) — Source: https://www.japantimes.co.jp/business/2026/06/25/companies/anthropic-alibaba-illegal-access/ - **Cybersecurity Insiders** (United States, en) — Source: https://www.cybersecurity-insiders.com/anthropic-accuses-china-alibaba-of-conducting-distillation-attack-on-claude-ai-models/ - **Inc.com** (United States, en) — Source: https://www.inc.com/hazel-gandhi/anthropic-accused-alibaba-of-a-distillation-attack-heres-what-that-means-and-why-its-so-dangerous/91365906 ### hardware / security detail - **Tom's Hardware** (United States, en) — Detailed breakdown of the distillation mechanics: 25,000 fake operator accounts, 28.8 million exchanges over 45 days, stripping safety alignment while preserving competency, exceeding the February 2026 Chinese lab cluster (DeepSeek, Moonshot, MiniMax combined, ~16 million exchanges) by 80%. > "The scale of Alibaba's campaign exceeded the combined total of DeepSeek, Moonshot and MiniMax campaigns identified in February 2026." Source: https://www.tomshardware.com/tech-industry/artificial-intelligence/anthropic-claims-that-chinas-alibaba-illicitly-distilled-its-models-from-april-to-june-2026 ### Asia tech, US-China framing - **Nikkei Asia** (Japan, en) — Japanese financial press frames the case as the US-China AI competition hardening into legal-regulatory territory, with Anthropic calling for coordinated government-industry action and the Senate letters signalling legislative intent to criminalise distillation. > "Anthropic is calling on Congress and the Administration to maintain American AI leadership through new rules on model distillation." Source: https://asia.nikkei.com/business/technology/artificial-intelligence/anthropic-accuses-alibaba-of-largest-known-distillation-attack-on-claude ### Hong Kong independent, tech-war sceptical - **South China Morning Post** (Hong Kong / China, en) — SCMP notes that distillation occupies a legal grey area, since no US statute explicitly criminalises querying a rival model, and that Anthropic's case rests on terms-of-service violation rather than IP theft, weakening its legal standing in international forums. > "Anthropic's distilling charges against Chinese firms expose an AI training grey area with no clear legal prohibition." Source: https://www.scmp.com/tech/tech-war/article/3344499/anthropics-distilling-charges-against-chinese-firms-expose-ai-training-grey-area ### Chinese state media, US tech-hegemony framing - **Global Times** (China, zh) — Global Times quotes Chinese experts saying Anthropic's claims lack technical substance and are rooted in anxiety over US AI dominance eroding, dismissing the case as a political move tied to pending US AI legislation rather than a genuine IP dispute. > "Anthropic's 'distillation' claims against Chinese firms lack substance, rooted in tech hegemony anxiety: Chinese expert." Source: https://www.globaltimes.cn/page/202606/1364418.shtml ## Across the graph - Related: [[anthropic-series-h-ipo-2026]], [[anthropic-compute-10gw-2026]], [[openai-jalapeno-broadcom-chip-2026]], [[chip-controls]] - Entities: Anthropic, Alibaba Qwen, Openai --- Canonical: https://rbtfl.xyz/en/n/anthropic-alibaba-claude-distillation