> Anthropic confirmed in a statement that Cathedral researchers had gained access to “a limited set” of its sales, human resources, and IT systems.
The end result is the same.
It matters less who was hacked than whose data was obtained.
The end result is the same but where the responsibility lies isn't. If Anthropic was themself hosting the solution then it would be theirs, but in this case the only thing they may be responsible for is passing data to a 3rd party that - potentially - doesn't have solid security practices.