154-Page Report: Iran Used Claude to Target U.S. Navy Ships

For space and defense professionals, the most concerning element is not a network intrusion but the open-source fusion of satellite imagery query scripts and transponder broadcasts into operational targeting packages. The 154-page Anthropic report, covering December 2025 through August 2026, shows how AI-assisted analysis can industrialize threat intelligence against naval assets without the cost of classified collection.

Anthropic has publicly confirmed that an Iran-linked threat actor used its Claude large language model to compile targeting handbooks for U.S. Navy ships and personnel operating in the Middle East. The disclosure, based on a 154-page threat intelligence report covering December 2025 through August 2026, describes an open-source intelligence campaign that fused ship and aircraft transponder data, captions from public military photographs, commercial satellite imagery query scripts, and websites that exposed U.S. naval movements. According to Anthropic, the actor also directed Claude to research known vulnerabilities in shipboard systems, including software flaws affecting maritime satellite communications terminals, Cisco communications equipment, and industrial control products. The company said it banned the account, created new detection mechanisms, and shared the intelligence with government authorities.

“

Anthropic has publicly confirmed that an Iran-linked threat actor used its Claude large language model to compile targeting handbooks for U.S.

The incident expands the threat landscape for state-linked actors using commercial AI models for military intelligence preparation. Previously, concerns about AI misuse centered on social influence operations, phishing, or malware writing; this case shows Claude functioning as an analytical force multiplier for target development. The actor did not need to breach classified networks. Public AIS-style transponder identifiers, photographs with personnel captions, satellite imagery query scripts, and openly accessible vulnerability disclosures were enough to produce material that Anthropic itself described as targeting handbooks. That is significant because it changes the cost curve: countries and non-state groups can now systematically assemble intelligence packages with a small team and a Python pipeline rather than large intelligence staffs.

The inclusion of a roster of U.S. service members scraped from captions on public military photos raises particular force-protection and personal-security issues. Even if the data was public, the AI-assisted aggregation and organization of names, ship identifiers, and movement patterns is qualitatively different from scattered individual disclosures. For the Navy, the operational impact is not necessarily immediate but long-term: adversaries may now be able to monitor naval positions faster and prepare target lists across communications, networking, and industrial control systems. The reported research into maritime SATCOM, Cisco equipment, and ICS flaws suggests the actor was interested in degrading communications and shipboard infrastructure, not simply tracking hull numbers.