Chinese AI labs secretly used millions of Claude exchanges to train their models Skip Navigation Markets Pre-Markets U.S. Markets Currencies Prediction Markets Cryptocurrency Futures & Commodities Bonds Funds & ETFs Business Economy Finance Health & Science Media Real Estate Energy Climate Transportation Investigations Industrials Retail Wealth Sports Life Small Business Investing Personal Finance Fintech Financial Advisors Options Action ETF Street Buffett Archive Earnings Trader Talk Tech Cybersecurity AI Enterprise Internet Media Mobile Social Media CNBC Disruptor 50 Tech Guide Politics & Policy White House Policy Defense Congress Expanding Opportunity Video Latest Video Full Episodes Livestream Live Audio Live TV Schedule CNBC Podcasts CEO Interviews CNBC Documentaries Digital Originals Watchlist Investing Club Trust Portfolio Analysis Trade Alerts Meeting Videos Homestretch Jim's Columns Education Subscribe PRO Pro News Josh Brown Mike Santoli Calls of the Day My Portfolio Livestream Full Episodes Stock Screener Market Forecast Options Investing Chart Investing Subscribe Livestream Menu Make It select USA INTL Livestream Search quotes, news & videos Livestream Watchlist SIGN IN Create free account Markets Business Investing Tech Politics & Policy Video Watchlist Investing Club PRO Livestream Menu Tech Chinese AI labs secretly used millions of Claude exchanges to train their models, Anthropic says Published Thu, Sep 10 2026 8:48 PM EDT Updated Thu, Sep 10 2026 8:59 PM EDT Jenny Lee @in/jenny-lee-102020a8 WATCH LIVE Key Points Anthropic said Alibaba and Moonshot were among Chinese companies involved in what it described as unauthorized “distillation” of its Claude models. The company said the activity was aimed at extracting capabilities from Claude to help train and improve other AI models. Anthropic’s findings were part of a broader report on misuse of its AI systems between December 2025 and August 2026. In this article BABA Follow your favorite stocks CREATE FREE ACCOUNT Jonathan Raa | Nurphoto | Getty Images Anthropic said it detected and disrupted unauthorized large-scale efforts by China-based AI labs including Alibaba , Moonshot and DeepSeek to train their models using Claude. The U.S. AI company said in a threat intelligence report released Thursday that the firms were involved in what it described as "illicit distillation," a process in which outputs from a more capable AI model are used to train another model and replicate some of its capabilities without authorization. "Some of these exchanges included sensitive information, including from individual users, major multinational companies, and state-affiliated actors ... These practices are likely inconsistent with privacy laws and the labs' own terms of service," according to the report. Anthropic said operators affiliated with Alibaba used Claude outputs to help train its Qwen models, while Moonshot routed some Kimi user requests to Claude and used some of the resulting exchanges to train its own models. The Alibaba operation was the largest distillation campaign Anthropic said it has measured, involving more than 151 million exchanges with Claude between May and July. The activity peaked at nearly 3 million exchanges per day from more than 3,500 fraudulent accounts, according to the report. The company said Alibaba also used Claude for broader AI research, including reinforcement learning and model architecture. Moonshot and DeepSeek Anthropic also detailed activity involving Moonshot AI, the Beijing-based company behind the Kimi family of AI models. Moonshot silently forwarded some customer requests intended for Kimi to Claude and then displayed Claude's responses to users, who thought they were using a Kimi model, according to the report. In one 10-day period, Moonshot relayed nearly 300,000 customer requests to Anthropic, the vast majority of which were routed to Claude Opus models. The requests were routed through a network of 5,380 accounts that Anthropic described as fraudulent, most of which appeared to be located in Singapore and Japan. The report said Moonshot saved at least some of those exchanges and extracted Claude's reasoning transcripts to use as training data for its own models. More than 23 million exchanges were attributed to Moonshot between May and July, according to the report. Some of the customer requests routed to Claude contained sensitive information. The company said it did not know whether Moonshot had notified customers that their requests were being sent to Anthropic. The company said DeepSeek — which rose into prominence last year due to its capabilities and cheap costs — also used tactics similar to Moonshot, transferring exchanges to Claude without notifying DeepSeek customers. Anthropic said it observed more than 12 million distillation attacks attributable to DeepSeek over 14 days in July 2026. The report, which named several other major Chinese AI companies, covers activity the company said it disrupted between December 2025 and August 2026 across seven areas, including cyber operations, influence operations, surveillance, scams and fraud, biological misuse, conventional weapons development and distillation. Alibaba, Moonshot, DeepSeek, Xiaomi and Anthropic did not immediately respond to CNBC's requests for comment. Choose CNBC as your preferred source on Google and never miss a moment from the most trusted name in business news. Subscribe to CNBC PRO Subscribe to Investing Club Licensing & Reprints CNBC Councils Select Personal Finance Join the CNBC Panel Closed Captioning Digital Products News Releases Internships Corrections About CNBC Site Map Podcasts Careers Help Contact News Tips Got a confidential news tip? We want to hear from you. Get In Touch CNBC Newsletters Sign up for free newsletters and get more CNBC delivered to your inbox Sign Up Now Get this delivered to your inbox, and more info about our products and services. Advertise With Us Please Contact Us Ad Choices Privacy Policy Your Privacy Choices CA Notice Terms of Service © 2026 Versant Media, LLC. All Rights Reserved. A Versant Media Company. Data is a real-time snapshot *Data is delayed at least 15 minutes. Global Business and Financial News, Stock Quotes, and Market Data and Analysis. Market Data Terms of Use and Disclaimers Data also provided by