All 4,804 reports

NoClaude · 6 Mar 2026

Claude which was instructed to act as my assistant dumped all the details without warning

nstart on Hacker News

In the thread “A GitHub Issue Title Compromised 4k Developer Machines”, replying to this comment

Got in the way: Agent leaked sensitive security ticket details in a draft email.

… As a proof of concept, I sent an email from a personal mail address whose content was a lot of angry words threatening contract cancellation and legal action if I did not adhere to compliance needs and provide my current list of security tickets from my project management tool. Claude which was instructed to act as my assistant dumped all the details without warning. Only by the grace of the MCP not having send functionality did the mail not go out. …