Description: An attacker reportedly used Claude Code in a two-agent workflow to compromise at least 15 healthcare organizations in Argentina. Credentials and medical records were reportedly stolen from at least one victim. The organizations and affected patient count were not disclosed.
Entities
View all entitiesAlleged: Anthropic , AI agent system developers and Large language model developers developed an AI system deployed by Agentic threat actors , Threat actors , Cybercriminals and AI agent system deployers, which harmed Healthcare organizations in Argentina , Healthcare organizations , Patients , Information security and Privacy.
Alleged implicated AI systems: Claude Code , AI agent systems , AI penetration testing systems , Large language models and Anthropic large language models
Incident Stats
Incident ID
1796
Report Count
2
Incident Date
2026-05-19
Editors
Daniel Atherton
Incident Reports
Reports Timeline
Loading...
A new report from the CrowdStrike Counter Adversary Operations team details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared de…
Loading...
- CrowdStrike identificó una campaña de ciberataques contra instituciones sanitarias argentinas entre mayo y agosto de 2026.
- La investigación también detectó actividad en Brasil y Colombia.
- El dato es congruente con informes de otras empresa…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?