| Mobile Web

Unauthorised Claude token usage spreads after session hijacking, users say

Cases have emerged in which hackers hijacked login sessions for Anthropic’s Claude accounts and used Claude Code tokens without authorisation. Anthropic confirmed abnormal activity on some accounts, forced session terminations, invalidated server-side tokens and issued refunds to some users. A UK-based independent AI consultant reported unexplained usage increases on a paid plan and said detailed logs were unavailable. Similar complaints surfaced on Reddit and GitHub, including sudden usage spikes and billing changes.