Anthropic vs Alibaba: what the Claude 'distillation attack' claim means

If you've seen headlines saying Anthropic accused Alibaba of the 'largest known AI distillation attack' and weren't sure what any of that meant, this is for you. In short: Anthropic, the company behind the Claude chatbot, told a US Senate committee on 10 June 2026 that operators linked to the Chinese tech giant Alibaba secretly used Claude on a huge scale to copy its abilities. Anthropic says it was about 28.8 million conversations through roughly 25,000 fake accounts over 44 days. Two things to hold onto from the start: these are accusations, and Alibaba says they aren't true.

'Model distillation' sounds technical, but the idea is simple. Imagine you can't get into an expensive tutor's class, so instead you send in thousands of students who each ask the tutor questions, write down every answer, and then use all those answers to train a cheaper copycat tutor at home. The copy never studied the way the real tutor did — it just learned to imitate the outputs. That's distillation: you train a smaller, cheaper AI model on a powerful model's answers so it behaves like the powerful one, for a fraction of the cost.

You might think the worst part is losing money or trade secrets. For Anthropic, the scarier bit is safety. When Anthropic builds Claude, it doesn't just teach it to be clever — it also spends a lot of effort teaching it what not to do: refuse dangerous requests, follow usage rules, and sit behind access controls. Anthropic's argument is that when you distil a model from Claude's answers, the copy learns the skills but not those safety brakes. So you could end up with a model that's nearly as capable as Claude at things like coding or cybersecurity, but far more willing to be misused. As they put it: the capability transfers, the guardrails do not.

This is the part to be careful about, because a lot of coverage blurs it. What's confirmed is that Anthropic made this accusation, in a letter to the Senate, and that a senator — Elizabeth Warren — repeated it, calling it the largest known distillation attack on Anthropic so far. Anthropic also says this one alleged campaign is bigger than three earlier ones it blamed on other Chinese labs (DeepSeek, Moonshot and MiniMax) back in February. What is not confirmed is the accusation itself: the 28.8 million figure, the 25,000 accounts, and Alibaba's involvement are all unverified, and Alibaba denies them. So the honest summary is: a big, serious claim that hasn't been proven and is being disputed.

One more piece of context worth knowing: this came out during a tense week when the US government was already pressuring Anthropic over how its most powerful models get released. That doesn't tell you whether the accusation is true — but it does explain why a dramatic claim about a Chinese rival landed in a letter to Congress rather than a quiet security report. When you read about it, keep the two apart: 'distillation is a real risk' is one thing; 'Alibaba definitely did this at this scale' is another, and that second part is still unproven. The sensible stance is neither to panic about a grand conspiracy nor to wave the whole thing away: take the safety concern seriously, treat the headline numbers as claims until someone independent checks them, and watch whether Alibaba or a regulator ever puts real evidence on the table.