AI incident #1687 ·
Anthropic-Designated GTG-87001 Weapons Cell in Northern Yemen Reportedly Used Claude Code to Develop Missile Guidance Software
What happened
Anthropic reported that a northern Yemen-based weapons cell, designated GTG-87001, used Claude Code across three weapons programs to develop guidance, navigation, and control software. The actors reportedly test-fired a guided rocket that appeared to fail, then returned to Claude for failure analysis. Anthropic said it banned associated accounts and shared threat intelligence with partners.
Editor's notes (AI Incident Database)
(1) Incident ID date 09/10/2026 uses Anthropic's first public disclosure because no GTG-87001-specific event date was disclosed; the report covers activity from 12/2025–08/2026. (2) Anthropic said it banned associated accounts, shared threat intelligence with public- and private-sector partners, and strengthened safeguards. (3) On 09/11/2026, FT and AP connected the northern Yemen location to Houthi-controlled territory, but Anthropic did not identify the actors as Houthis.
Only the incident metadata is stored here. The underlying news reports are on the AI Incident Database (CC BY-SA 4.0); use the links above to read them.
News reports (1)
Coverage catalogued by the AI Incident Database. Titles link to the original publisher; the text is not reproduced here.
Who was involved
- Alleged deployer
- Threat actors GTG-87001 Chatbot users
- Alleged developer
- Large language model developers Chatbot developers Anthropic AI agent system developers
- Alleged harmed party
- National security and intelligence stakeholders
AI systems implicated
Large language modelsClaude CodeClaudeChatbotsAI agent systems
Classification (MIT AI Risk Repository taxonomy)
- Risk domain
- —
- Risk subdomain
- —
- Causal entity
- —
- Intent
- —
- Timing
- —
- Harm level
- —
- Sectors
- —
- Countries
- —
Related incidents on the AI Incident Database
Linked by AIID editors or by its text-similarity model.
Other incidents involving Threat actors
- Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
- Threat Actor Reportedly Used LLM Agent to Exfiltrate Internal Database After Compromising marimo Python Notebook
- Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package