Anthropic alleged that Alibaba-affiliated operators conducted the largest known AI model distillation campaign against its Claude chatbot in a June 10 letter to Senate Banking Committee leaders. The company claimed operators affiliated with Alibaba and its Qwen AI lab generated more than 28.8 million exchanges with Claude between April 22 and June 5 using nearly 25,000 fraudulent accounts. Anthropic framed the distillation effort as a national security issue that could accelerate China's military and cyber AI capabilities. The letter comes as Washington intensifies efforts to protect U.S. AI leadership through expanded cybersecurity initiatives and export controls.
Anthropic Alleges 28.8 Million Claude Exchanges Used in Distillation Campaign
In the June 10 letter to Senate Banking, Housing, and Urban Affairs Committee Chairman Tim Scott and Ranking Member Elizabeth Warren, Anthropic alleged that the fraudulent accounts did not represent real, organic users. The company said the operations targeted Claude's agentic reasoning, software engineering, and long-horizon planning capabilities, allowing competitors to reproduce advanced model behavior without the cost of training a frontier AI system.
"Beyond its scale, this campaign was striking for its brazen nature," Anthropic wrote. "Alibaba is listed on the New York Stock Exchange, maintains business operations in the United States, and is accountable to U.S. investors and regulators."
Anthropic said the campaign went beyond intellectual property concerns, framing large-scale model distillation as a national security issue. "When PRC labs distill these capabilities from U.S. models, they capture the returns on American investments without bearing the costs or risks associated with training frontier AI models," Anthropic wrote. "This inverts the economic logic that underwrites American AI leadership, turning billions of dollars' worth of research and development, compute, and other U.S. investments into a subsidy for our competitors."
The letter builds on Anthropic's claims in February that Chinese AI developers DeepSeek, Moonshot AI, and MiniMax generated more than 16 million Claude exchanges using roughly 24,000 fraudulent accounts.
Anthropic Urges Congress to Expand Export Controls and Intelligence Sharing
Anthropic urged lawmakers to expand intelligence sharing between frontier AI developers and the U.S. government, clarify antitrust rules to allow AI companies to share information about distillation attacks, strengthen export controls on advanced AI chips and compute, close loopholes that allow Chinese firms to access overseas data centers, and impose penalties on companies responsible for large-scale model extraction.
A spokesperson for Anthropic told Decrypt, "We believe combating the threat of illicit distillation requires coordinated action between government and industry, and we will continue working with Congress and the administration to maintain American AI leadership."
The letter comes as lawmakers consider legislation targeting unauthorized access to U.S. frontier AI models. Earlier this month, President Donald Trump signed an executive order expanding AI-powered cybersecurity initiatives after delaying the measure over concerns it could weaken America's competitive position against China.
Industry Debate on AI Model Distillation Practices Intensifies
The allegations drew criticism from observers who argued that AI companies rely on similar techniques when training their own systems. Anthropic has countered that conventional distillation is a legitimate method for producing smaller, cheaper models, while unauthorized extraction of frontier model capabilities through fraudulent access violates its terms of service.
In April, Elon Musk testified in federal court that xAI had "partly" used OpenAI models while training Grok, underscoring that distillation is an established industry practice—even as companies dispute where legitimate model training ends and unauthorized model extraction begins.
FAQ
What did Anthropic allege in its June 10 letter to Congress?
Anthropic alleged that Alibaba-affiliated operators conducted the largest known AI model distillation campaign against its Claude chatbot, generating more than 28.8 million exchanges between April 22 and June 5 using nearly 25,000 fraudulent accounts.
Why does Anthropic consider AI model distillation a national security issue?
Anthropic framed large-scale model distillation as a national security issue because it could accelerate China's military and cyber AI capabilities while narrowing the United States' technological lead. The company stated that distillation allows competitors to capture returns on American investments without bearing the costs of training frontier AI models.
What policy changes is Anthropic recommending to Congress?
Anthropic urged lawmakers to expand intelligence sharing between AI developers and the U.S. government, clarify antitrust rules to allow information sharing about distillation attacks, strengthen export controls on advanced AI chips, close loopholes allowing Chinese firms to access overseas data centers, and impose penalties on companies responsible for large-scale model extraction.
