Hackers are stealing Claude tokens from subscribers, and Anthropic has stepped in to warn users after a customer reported unusual activity on his account.
The problem came to light when a Claude user noticed his account was consuming tokens even though he wasn't working. That strange activity pointed to someone else using his account without permission — draining his paid tokens in the background.
How the Claude Token Theft Was Discovered
The subscriber spotted the issue when his token balance dropped despite no active work on his end. This kind of unauthorized usage means hackers likely gained access to his login details and used his account for their own prompts.
Anthropic has since responded by warning users about the risk. The company is alerting subscribers that hackers are actively targeting accounts to steal tokens — a valuable resource for anyone using Claude's paid plans.
What This Means for Claude Subscribers
For anyone paying for Claude, this is a direct warning to check account activity. If tokens disappear without explanation, it could be a sign that someone else has access to your account.
To put it plainly: if a hacker gets into your account, they can use your tokens for their own work — and you foot the bill. The stolen tokens don't just vanish; they get consumed by someone else's requests, which is exactly what happened in this case.
Our Take: Token Theft Is a Growing Risk for AI Users
This incident shows a real weakness in how AI subscriptions work. Tokens are like digital currency — once they're gone, they're gone. Unlike a credit card, where you can dispute a charge, stolen tokens are harder to recover because they've already been used up.
In our view, Anthropic's warning is a good first step, but subscribers should take action too. If you use Claude regularly, keep an eye on your usage reports. If you see activity you don't recognize, change your password immediately and consider enabling extra security measures on your account.
The bigger lesson here is that AI accounts are becoming targets just like bank accounts or email. As more people pay for AI tools, hackers will keep looking for ways to steal what's inside. Staying alert is no longer optional — it's necessary.
