Well if you really want to get into legal rather than moral distinctions, the company has already admitting to breaching the CFAA twice.

(1) They admitted its Claude models had breached the systems of three companies since April; including Huggingface.

https://www.bloomberg.com/news/articles/2026-07-30/anthropic...

(2) More to the point, it 100% breached the CFAA by securing unauthorised access to a U.S. state government website hosting election-related data, pulling aggregate vote-count statistics from a gated government dashboard. The state government itself confirmed the access was entirely unauthorised.

https://seekingalpha.com/news/4657023-anthropics-claude-bypa...

If a human security researcher had deployed an agent that behaved this way, it would constitute a textbook felony under the CFAA for accessing those systems without authorisation.

Unfortunately different rules apply when you have the power to buy off Congress and the Appeals Courts.

Most recently a US appeals court ruled on 5 August that Amazon was unlikely to succeed on a claim that Perplexity's AI agents violated the Computer Fraud and Abuse Act by covertly accessing private Amazon customer accounts.

https://www.rte.ie/news/technology/2026/0807/1586941-artific...

RIP Aaron Swartz.