Double trouble: Hackers used both Claude Code and ChatGPT in a cybersecurity hack that lasted two and a half months.

Gambit Security researchers reported an AI-driven intrusion campaign (Dec 2025–Feb 2026) that compromised nine Mexican government agencies and exfiltrated massive datasets — roughly 195 million identities and detailed tax records, 15.5M vehicle registry records, millions of property records, and other civil records — with attackers reportedly leveraging Claude Code and OpenAI’s GPT-4.1.