Hackers Are Stealing Claude Tokens from Subscribers

After subscribers noticed their quota quietly draining while accounts sat idle, Anthropic issued a warning regarding unauthorized access and token theft. Threat actors appear to be targeting Claude subscription credentials and session tokens, effectively reselling access or routing automated workloads through victim accounts. As premium inference limits become valuable digital assets, developer and subscriber credentials are facing increasingly systematic exfiltration.