Sources: in a letter to US officials, Anthropic accused Alibaba of adversarial distillation, using Claude 28.8M times from April to June via almost 25K accounts

Anthropic PBC accused Chinese technology giant Alibaba Group Holding Ltd. of waging a large-scale effort to “illicitly” …

Bloomberg 2026-06-25 Maggie Eastland

Context & Ripple Effects

The allegation follows reporting that OpenAI, Anthropic, and Google were sharing information through the Frontier Model Forum to identify terms-of-service-violating distillation attempts. It therefore sits within an emerging collective-defense effort around frontier-model access rather than an isolated vendor dispute.

Subsequent coverage indicates the conflict quickly moved from accusation to operational consequences: Anthropic tightened routes that could enable access through cloud providers or overseas subsidiaries, while Alibaba reportedly removed Claude models from internal use.

First-order effects

Anthropic’s letter places Alibaba’s alleged use of Claude before U.S. officials, increasing immediate scrutiny of Alibaba’s AI-access practices; the allegation itself remains unproven in the provided coverage.
Alibaba faces an immediate market and operational overhang: its Hong Kong shares fell after the accusation, and later reporting says it barred Claude Code and asked employees to remove Claude models from work computers.

Second-order effects

Model providers have stronger incentive to close account, cloud-provider, and overseas-subsidiary pathways that can bypass stated access restrictions, potentially making legitimate cross-border enterprise access more cumbersome as well.
The reported share decline in Alibaba alongside falls in Xiaomi and Baidu suggests that allegations over frontier-model access can spill over into investor assessments of Chinese AI companies, not just the accused firm.

Third-order effects

If providers continue sharing detection signals and restricting workaround channels, access to leading AI models may become more segmented by jurisdiction and corporate affiliation, with compliance architecture becoming part of model distribution.
The episode could strengthen the case for formalized industry and policy mechanisms governing model extraction and cross-border use; whether that produces common standards or competing national regimes remains uncertain.

The trend: This is one data point in the shift from open-ended API distribution toward coordinated, security-driven control of frontier-model access and anti-distillation enforcement.

Discussion

@kimmonismus @kimmonismus on x
Anthropic claims: Alibaba continues to distill Claude on a large scale to train Qwen. Via Bloomberg Anthropic is accusing Alibaba-linked operators of running a massive campaign to illicitly access Claude through nearly 25,000 fraudulent accounts. According to Bloomberg, [image]
@danielremler Daniel Remler on x
Alibaba now accused of conducting a massive campaign of adversarial distillation against Anthropic—unsurprising considering they face the same compute and expert data constraints as the rest of the PRC AI ecosystem. The question was always when, not if they would do this.
@eastland_maggie Maggie Eastland on x
Latest : Anthropic says Alibaba conducted the largest ever campaign to glean its IP via 28.8 million exchanges with Claude. Senators Hagerty and Kim are introducing an NDAA amendment directing Commerce to blacklist Chinese companies found to be doing this.
@chrisrmcguire Chris McGuire on x
Will be interesting to see how much teeth this bill has. Commerce absolutely should take such action, it shouldn't have to be compelled to do so. Also, somehow I don't think Alibaba is going to win their lawsuit to reverse their designation as a Chinese Military Company...
@gregkamradt Greg Kamradt on x
obvious in retrospect but I had no idea there was a black market for tokens [image]
@quinnypig Corey Quinn on x
I *SAID*, “make no mistakes!” Run it again!
@kyleichan Kyle Chan on x
This is a really massive unauthorized distillation campaign. For comparison, reported from Anthropic: - DeepSeek: 150,000 exchanges - Moonshot: 3.4 million - MiniMax: 13 million - Alibaba: 28.8 million
@ednewtonrex Ed Newton-Rex on x
Anthropic taking creatives' work: absolutely legitimate, fair use, necessary for national security. we will do it more in fact Anthropic when companies take their work: no no no. this is brazen, illicit theft. STOP IT NOW [image]
@javedhassan Javed Hassan on x
Anthropic's complaint has all the hallmarks of an incumbent technological leader unsettled by the prospect of capable rivals and eager to enlist political power to preserve a market advantage. Technological diffusion is not a Chinese invention. It is how economic history works.
@aleabitoreddit Serenity on x
Today, Anthropic has directly accused the $BABA Qwen AI lab of distilling its frontier AI models. By creating thousands of fake accounts and over 28.8 million exchanges. Feels like this is kind of known by now... but there's been no real penalties enforced yet. We'll see [image]
@runclepennybags Rich Uncle Pennybags on x
I can't really see how you can claim that sucking up thousands of copyrighted books or whatever is fine but distillation is IP theft. Doesn't really seem intellectually consistent at all.
@edludlow Ed Ludlow on x
Anthropic alleges Alibaba illicitly access Claude. Sentence nice. Story severe. Read below.
@wisemancap Kaushik on x
Anthropic Accuses Alibaba Of ‘Illicitly’ Accessing AI Models - Bloomberg - Timeline: April through June - Volume: 28.8 million exchanges with the Claude model. - Infrastructure: Executed via nearly 25,000 fraudulent accounts. - Pattern: Anthropic noted the campaign mirrors
@somewheresy @somewheresy on x
interesting. btw how did they make Claude?
@ecommurz Elon Murz on x
So when Anthropic steal Reddit data (without license & Reddit is now suing them) its called innovation. But when Alibaba query Claude to distil outputs for Qwen, suddenly its an “industrial-scale attack”?
@kimmonismus @kimmonismus on x
There may be an entire grey-market economy around Claude access in China: resellers allegedly pool Claude Max accounts, operate bot networks, and sell access far below official API prices. The more interesting claim: user logs and reasoning traces may be resold as training data. …
@nilsgilman Nils Gilman on bluesky
Whatever you make of the IP issues (and there's a lot of glass-house dwelling rock throwers involved) what's certain is that the inability to create (or perhaps more accurately: defend) any “moat” is a major business model problem for the frontier model hyperscalers: www.reuters.…
@discoplomacy Sam on x
Anthropic's letter accusing Alibaba of distillation. [image]
r/Anthropic r on reddit
Anthropic Says Alibaba-Linked Operators Used 25,000 Accounts to Mine Claude for Qwen — RuntimeWire
@suchenzang Susan Zhang on x
instead of indulging in all this fear-mongering frontier-stealing narrative slop, @Alibaba_Qwen might as well release all “29 million Claude exchanges” for the benefit of open-source research and call it a day let the public decide for themselves how “dangerously critical” these

Chronicles