Anthropic accuses Alibaba of largest Claude distillation campaign to date

# Anthropic accuses Alibaba of running largest Claude distillation campaign to date Anthropic has accused Alibaba of orchestrating the largest model distillation campaign it has ever publicly disclosed, according to a letter the company sent to the US Senate Banking Committee on June 10, 2026. The letter, first reported by Reuters on June 24, alleges that operators affiliated with Alibaba and its Qwen AI lab generated more than 28.8 million exchanges with Claude through nearly 25,000 fraudulen

3 min
Anthropic accuses Alibaba of largest Claude distillation campaign to date

# Anthropic accuses Alibaba of running largest Claude distillation campaign to date

Anthropic has accused Alibaba of orchestrating the largest model distillation campaign it has ever publicly disclosed, according to a letter the company sent to the US Senate Banking Committee on June 10, 2026.

The letter, first reported by Reuters on June 24, alleges that operators affiliated with Alibaba and its Qwen AI lab generated more than 28.8 million exchanges with Claude through nearly 25,000 fraudulent accounts between April 22 and June 5, 2026. The exchanges targeted Claude's software engineering, agentic reasoning, and cybersecurity capabilities, the same abilities embodied in Anthropic's Mythos Preview model.

Distillation is a well-known machine learning technique where a smaller, less capable model is trained on the outputs of a larger, more capable one. It has legitimate uses: companies routinely distill their own large models into smaller, faster variants. The controversy arises when the technique is used to copy a competitor's model without authorization, effectively extracting intellectual property through API access.

According to Anthropic, the Alibaba operation was designed to mimic normal user behavior at industrial scale. The 25,000 accounts were spread across geographically dispersed servers to avoid triggering rate limits or detection systems. At 28.8 million exchanges over roughly six weeks, the campaign would have harvested an estimated 57.6 billion tokens of Claude output.

Anthropic told senators that distillation accelerates China's ability to reach the capabilities of its most advanced models at a fraction of the development cost. The company called on Congress to implement information-sharing frameworks, penalties for foreign entities engaged in industrial-scale siphoning, and cooperation from cloud providers to detect and block suspicious traffic patterns.

Alibaba has denied the allegations. The company did not respond to requests for comment from Reuters or the Wall Street Journal at the time of publication. Alibaba's AI business has been growing rapidly; CEO Eddie Wu said on the company's fiscal Q4 2026 earnings call that cloud unit external revenue grew 40% year-over-year, with AI-related products accounting for 30% of that total.

The accusation mirrors a similar claim by OpenAI, which told House lawmakers earlier this year that DeepSeek used distillation to improve its models on OpenAI outputs. Google's Threat Intelligence Group has also warned of rising distillation attacks targeting Western AI companies.

The Forbes analysis published August 3 frames the incident as part of a broader pattern: Chinese AI firms accused of copying American models, investors pushing valuations sky-high regardless, and US policymakers struggling to define what constitutes IP theft when the stolen asset is a statistical model's output rather than source code.

Anthropic's letter was addressed to Senator Tim Scott (R-SC), chair of the Banking Committee, and Senator Elizabeth Warren (D-MA), its ranking member. No legislation has been introduced in direct response to the disclosure.

## Sources

- [Reuters: Anthropic says Alibaba illicitly extracted Claude AI model capabilities](https://www.reuters.com/world/china/anthropic-says-alibaba-illicitly-extracted-claude-ai-model-capabilities-2026-06-24) - [WSJ: Anthropic Accuses Chinese Companies of Siphoning Data From Claude](https://www.wsj.com/tech/ai/anthropic-accuses-chinese-companies-of-siphoning-data-from-claude-63a13afc) - [Forbes: Chinese AI Firm Siphoned American AI Knowledge From Anthropic Claude By Using Millions Of Prompts](https://www.forbes.com/sites/lanceeliot/2026/08/03/chinese-ai-firm-siphoned-american-ai-knowledge-from-claude-by-using-millions-of-prompts-and-trained-on-the-responses) - [Barchart: Anthropic Accuses Alibaba of Massive AI Data Distillation Attack](https://www.barchart.com/story/news/3038274/anthropic-accuses-alibaba-of-massive-ai-data-distillation-attack-how-to-play-baba-stock-here) - [Digital Applied: Anthropic Accuses Alibaba of a Record Distillation Campaign](https://www.digitalapplied.com/blog/anthropic-alibaba-distillation-campaign-2026-ai-ip-war)

Written by

More to read

  • Activation Checkpointing in Large Language Models: How Selective Recomputation Eliminates Memory Bottlenecks

    Large language model pre-training and fine-tuning are fundamentally constrained by GPU memory (VRAM). While distributed techniques such as Fully Sharded Data Parallel (FSDP), ZeRO, and Tensor Parallelism successfully shard model parameters, optimizer states, and gradients across hundreds or thousands of GPUs, activation memory presents a distinct scaling bottleneck. During the forward pass of a transformer model, intermediate tensor outputs must be preserved in GPU memory so that backpropagatio

    1 min
  • Anthropic Demonstrates Autonomous De Novo Protein Design and Chemical Analysis with Claude

    Anthropic Demonstrates Autonomous De Novo Protein Design and Chemical Analysis with Claude Anthropic has published experimental results demonstrating Claude's ability to autonomously design de novo protein binders with physical wet-lab validation and automate complex analytical chemistry workflows. The findings show frontier LLMs acting as autonomous agents across computational biology and molecular characterization pipelines. In the primary experiment, Anthropic evaluated Claude Mythos Previe

    1 min
  • Cerebras Unveils CS-4 Rack-Scale System Powered by Three WSE-3 Turbo Chips and Nexus Architecture

    Cerebras Unveils CS-4 Rack-Scale System Powered by Three WSE-3 Turbo Chips and Nexus Architecture Cerebras Systems has announced the CS-4, a rack-scale AI accelerator system designed around three of its next-generation Wafer Scale Engine 3 Turbo (WSE-3 Turbo) chips and a modular hardware architecture dubbed Nexus. Cerebras confirmed that initial customer shipments for the CS-4 are scheduled to begin in the current quarter. The new system marks a structural shift from Cerebras's single-wafer CS

    1 min