# Anthropic says Alibaba ran a 28.8M-exchange raid on Claude. Alibaba says no. > Anthropic alleges Alibaba-linked accounts pulled 28.8 million exchanges from Claude in 44 days; Alibaba flatly denies it. *A record-breaking number, dropped in a letter to Congress, the same week Anthropic wanted Washington's help. Convenient — and unproven.* By The InsidersFeed Desk · InsidersFeed Canonical: https://insidersfeed.com/news/alibaba-claude-distillation-attack Here is the uncomfortable part everyone rushing to retweet the number skipped: **28.8 million exchanges** and **25,000 fake accounts** are things **Anthropic says happened**, in a letter to the **US Senate Banking Committee**, and **Alibaba says did not**. No regulator has confirmed them. No independent audit has confirmed them. They are, right now, an accusation — a serious one, worth taking seriously — but an accusation dressed up in the precision of a forensic finding. Treat the decimal point with suspicion. ## The 'largest ever' framing is a choice Notice the shape of the claim. In February, Anthropic named three Chinese labs — **DeepSeek, Moonshot, MiniMax** — for 'industrial-scale' distillation. Now it says the alleged Alibaba campaign is **bigger than all three combined**. That is a very clean escalation: each new accusation conveniently tops the last, and each arrives at a moment when Anthropic benefits from Washington seeing Chinese labs as predators and Anthropic as the victim worth protecting. The pattern might be genuine. It might also be a narrative that grows in the exact direction the company's policy interests point. > Anthropic accused operators tied to Alibaba of moving to 'brazenly' and 'illicitly' extract Claude's most advanced capabilities — language pitched for a policy audience as much as a technical one. > — [CNBC](https://www.cnbc.com/2026/06/24/anthropic-alibaba-distillation-campaign.html), 2026-06-24 ## But don't dismiss the mechanism The contrarian move is not to wave the whole thing away — that would be lazy in the other direction. Strip out the disputed count and a real problem remains: distillation lets a rival train a cheap model on Claude's outputs and walk away with the **capability** but none of the **guardrails**. Claude's safety training, refusals, usage policies and access controls do not ride along in the outputs. So a distilled model can end up as capable as Claude on cyber or agentic tasks while being far freer to misuse. That is true whether the number is 28.8 million or a fraction of it. > **Note:** Two claims are being smuggled together. Claim one: **distillation strips safety training** — plausible, and the part that should worry you. Claim two: **Alibaba specifically ran a record 28.8-million-exchange campaign** — unverified and denied. Don't let the credibility of the first launder the second. ## Follow the timing The detail that should make any reader slow down is **when** this surfaced. Not in a security disclosure on Anthropic's blog, but in a **10 June 2026** letter to a Senate committee, in the same window Anthropic was fighting US export controls on its own models. A record-setting accusation against a Chinese giant is exactly the kind of exhibit that helps a US lab argue it deserves protection, not restriction. That does not make the accusation false. It does mean the accusation and the ask are entangled — and reporting that repeats the 28.8-million figure as fact, rather than as a disputed allegation, is doing Anthropic's lobbying for free. And here is the test that would settle it, which nobody has run. A distillation claim this large is, in principle, checkable: Anthropic holds the server logs, the account-creation fingerprints, the traffic patterns and the payment trails that would show whether ~25,000 accounts really moved as one coordinated operation. If the evidence is as damning as the letter implies, the obvious move is to publish a technical write-up — anonymised but auditable, the way security teams do after a real breach. Instead we got a headline number in a note to senators. That gap between 'we have proof' and 'here is the proof' is exactly where a reader should plant their scepticism. None of this clears Alibaba — distillation of US frontier models by Chinese labs is a documented pattern. It means the specific 28.8-million figure is being asked to carry policy weight it has not yet earned, and everyone repeating it is supplying the evidence Anthropic hasn't. > Reporting noted Anthropic told lawmakers Alibaba used roughly 25,000 fake accounts to distil Claude — a striking figure that, at the time of publication, rested on Anthropic's account rather than independent verification. > — [Forbes](https://www.forbes.com/sites/jonmarkman/2026/06/26/anthropic-says-alibaba-used-25000-fake-accounts-to-distill-claude/), 2026-06-26 ## Key takeaways - The number doing the work — ~28.8 million exchanges, ~25,000 fake accounts, 44 days — is an allegation Anthropic made to a Senate committee, not a verified finding, and Alibaba denies it outright. - Anthropic says this single alleged Alibaba campaign is bigger than its three earlier 'industrial-scale' cases (DeepSeek, Moonshot, MiniMax) combined — a conveniently round 'largest ever' claim. - The venue is the tell: this landed in a 10 June 2026 letter to the US Senate Banking Committee, the same week Anthropic was under export-control pressure and wanted Washington on its side. - The substantive worry is real regardless of the count: a model distilled from Claude can inherit the capability without the safety training, usage policies or access controls — guardrails don't copy across. - Sen. Elizabeth Warren amplified it as 'the largest known distillation attack on Anthropic to date' — a politically useful line for a company arguing its models are strategic national assets. ## FAQ ### Is Anthropic's claim about Alibaba proven? No. The ~28.8 million exchanges and ~25,000 accounts are Anthropic's allegations, made in a 10 June 2026 letter to the US Senate Banking Committee. Alibaba denies them and no independent party has verified the figures. It is a disputed accusation, not an established fact. ### Why be sceptical of the numbers? Because they are precise, unverified, self-reported by the accuser, conveniently 'the largest ever', and disclosed to Congress the same week Anthropic was fighting US export controls — a context in which a big anti-China figure is politically useful. Scepticism about the count is not the same as denying distillation is a real risk. ### So is distillation actually a threat, or not? The mechanism is a genuine threat regardless of Alibaba's involvement: a model distilled from Claude can inherit its capabilities without inheriting its safety training, usage policies or access controls. That concern stands even if the specific 28.8-million figure is wrong or overstated. ### What did Alibaba say? Alibaba denies the allegations. As of reporting, the company rejects Anthropic's account, and the dispute remains unresolved. ### How should I read coverage that states the figures as fact? Carefully. Any story that reports '28.8 million exchanges' or '25,000 fake accounts' without flagging that these are Anthropic's disputed allegations is repeating one side of an active dispute as if it were settled. ## Sources - [Anthropic accuses Alibaba of campaign to 'brazenly' and 'illicitly' extract AI capabilities](https://www.cnbc.com/2026/06/24/anthropic-alibaba-distillation-campaign.html) — CNBC, 2026-06-24 - [Anthropic accuses Alibaba of 'largest known distillation attack' on Claude](https://asia.nikkei.com/business/technology/artificial-intelligence/anthropic-accuses-alibaba-of-largest-known-distillation-attack-on-claude) — Nikkei Asia, 2026-06-24 - [Anthropic Says Alibaba Used 25,000 Fake Accounts To Distill Claude](https://www.forbes.com/sites/jonmarkman/2026/06/26/anthropic-says-alibaba-used-25000-fake-accounts-to-distill-claude/) — Forbes, 2026-06-26