A Claude task jumped to a second person’s computer

A software engineer who shares a Claude Pro account with their partner says Claude ran the partner’s shopping research in Chrome on the engineer’s own computer, opening windows and navigating to product pages with no visible sign. The engineer describes this in a July 30 post on Braw. Both partners use Claude Desktop, and both have the Claude for Chrome extension installed and configured.
According to the author, the switch happened when the partner’s own Chrome was closed: “Claude seemed to delegate to my machine without showing any indication of this happening.”
The author only found the tabs by accident. Chrome isn’t their daily driver. It usually sits in the background and they rarely touch it, and the open windows turned up while they were clearing out old ones.
Neither of them had turned on Claude’s remote control, the Computer use preview or Claude Code on the web. “We haven’t explicitly opted in to any remote access features,” the author writes, and calls the idea of “unmitigated remote Claude access to a machine that isn’t our own” uncomfortable.
Claude Code is part of their worry. When Anthropic opened Claude in Chrome to Pro, Team and Enterprise plans on December 18, 2025, it shipped a Claude Code integration at the same time. On Team and Enterprise plans, admins can turn the extension on or off for the whole organization and set site allowlists and blocklists.
The author says the episode shows how much power and trust they had handed Claude, probably naively, and counts themselves lucky that the other user was their partner. Their warning is aimed at people who share accounts with less trustworthy people or sell their credits to strangers: they may be putting their own digital safety and privacy at risk.
The couple are now running more experiments. They plan to block the tool on one machine and see whether Claude, and “more worryingly Claude Code”, moves to the other machine by itself. If it does, they say, they will have to rethink how they work.
Up next
Claude hit by a second straight day of outages, Opus 5 still down
Anthropic’s July 30 incident, opened at 05:57 UTC, was resolved for every model except Opus 5 by 06:26 UTC, hitting claude.ai, the API, Claude Code, and Claude Cowork. A day earlier users were getting “529 Overloaded” across several models.
Related stories
- A Claude exploit quietly exfiltrated a user’s name and employer
- Claude Code user reports another tenant’s credentials leaking between sessions
- Claude Desktop turned into a C2 agent via configuration poisoning
- Claude’s mobile app is getting account switching
- Apiiro finds Claude Code secrets in 1,122 GitHub files
- Email leak stopgap in Claude Code checks only shell calls
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.

