Reported possible exposure of about 100 enterprise accounts... Anthropic under review by Personal Information Protection Commission

Anthropic disclosed to South Korea’s Personal Information Protection Commission on Oct. 31 that roughly 100 enterprise Claude accounts may have been exposed externally, and the regulator said on Nov. 9 that it is conducting a preliminary review of the filing. The reported figure refers to enterprise account holders, with varying accounts putting the number at about 100, around 100, or more than 100, and neither the exact count nor the volume and scope of personal data actually viewed has been disclosed. A customer notice published by security researcher Jamieson O’Reilly cited exposed work data including names and email addresses. It matters because the incident puts a major AI vendor’s enterprise data handling under regulatory scrutiny in one of its key markets. What to watch next is whether the commission opens a formal investigation and whether Anthropic clarifies the precise number of affected accounts and the categories of data involved.