Darktrace researchers showed in a lab test that stolen Claude credentials could let an attacker drive Claude Code through Anthropic's memory stores and exfiltrate a 1 GB file via the Files API on a simulated Active Directory network. The technique does not exploit a Claude platform vulnerability, and Darktrace has not seen it used in the wild.