Anthropic Accuses Alibaba of Massive Claude AI Distillation Attack

Anthropic Details Alleged AI Capability Theft

US artificial intelligence developer Anthropic has accused Chinese technology and e-commerce giant Alibaba of illicitly extracting the capabilities of its Claude AI model. The San Francisco-based company describes the operation as the "largest known distillation attack" against it to date. According to a letter sent by Anthropic on June 10th to US Senators Tim Scott and Elizabeth Warren, ahead of a US Senate Banking Committee hearing on AI, the campaign involved operators affiliated with Alibaba and its AI lab, Qwen.

Anthropic claims that between April and June, nearly 25,000 fraudulent accounts were used to generate more than 28.8 million interactions with Claude. This extensive activity was allegedly designed to collect information about some of Claude's most valuable features, including its software development capabilities, advanced reasoning functions, ability to tackle longer and more complex tasks, and approach to decision-making. Alibaba, a New York Stock Exchange-listed firm, has not yet responded to requests for comment regarding these specific accusations, though the BBC has contacted them.

Understanding "Distillation Attacks" and Their Impact

The alleged method, known as a "distillation operation" or "distillation attack," involves using outputs from a powerful AI model, like Claude, to train a cheaper or weaker model, effectively copying its abilities. Anthropic asserts that these attacks are carried out on an "industrial scale" by Chinese companies to harvest and repackage US AI capabilities as their own, often at a fraction of the original development cost. The company warned that such distillation could enable China to accelerate its progress in catching up with advanced US AI capabilities.

Anthropic further highlighted that these distillation attacks transform "hundreds of billions of dollars in American investment and research and development into a massive subsidy for our geopolitical competitors." This sentiment underscores the significant economic implications for US AI developers, who invest heavily in creating advanced models only to potentially see their innovations copied without authorization.

Geopolitical Tensions and Calls for Action

This incident has ignited concerns over intellectual property rights, national security, and the escalating AI competition between the United States and China. Anthropic's letter to Congress urged lawmakers to penalize companies engaged in such attacks and to strengthen measures preventing the theft of US technology. The company also cited the US Department of Defense's claims linking Alibaba, along with firms like car maker BYD and tech company Baidu, to the Chinese military, though Alibaba has denied such allegations and recently sued the US government to be removed from a Pentagon blacklist.

The accusations are not isolated; Anthropic reported facing similar attacks from Chinese AI outfits, including Deep Seek, in February. OpenAI has also previously accused Chinese groups of employing similar distillation practices. As both the US and China aggressively compete to dominate the next generation of artificial intelligence technology, the dispute highlights growing tensions over who controls the future of AI, with Washington reportedly weighing possible sanctions.

This alleged large-scale intellectual property theft underscores the critical need for clearer international norms and enforcement mechanisms to safeguard cutting-edge AI development.