WIRED: Accenture worker’s Claude agent ran on DOD network

An Accenture contractor’s personal Claude Code agent ran on a Defense Department network for two months and appears to have sent login credentials to a high-risk website, sources tell WIRED. Accenture says an independent investigation found the allegations without merit. The Pentagon won’t comment on its systems.
The contractor gave the agent their credentials so it could write code and spin up cloud servers, which handed it admin access on NIPRNet, the Pentagon’s unclassified network. It then appears to have sent passwords and a map of NIPRNet to a site NIST flagged for a flaw that lets attackers steal credentials through coding agents.
Sources say Accenture didn’t initially report the incident, despite a 72-hour reporting rule. There’s no indication hackers reached a classified system.
Up next
Open modelsanalysis
Kimi K3.1 Pro weights land on HuggingFace at 2.8T params
“Our most capable 3T-class model to date,” Moonshot AI says of Kimi K3.1 Pro, and the open weights are now on HuggingFace under the company’s own license. Would you run Kimi K3.1 Pro on your own hardware or stick to an API?
Related stories
- Claude Code puts staff bypass requests in Accept edits
- Bank hacker’s Claude Code logs sat in an open directory
- Git config can execute before agent approval
- Elastic finds Claude Code and ChatGPT abused in intrusions
- LSP plugin made Claude Code 11% pricier on C++ fixes
- Tainted Claude Code build stayed in Cursor, Microsoft finds
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.

