Hackers are stealing Claude tokens from subscribers

On August 4, Grant De Swardt, an AI consultant, observed unusual token usage on his Claude Max 20x account despite not using it. After sharing his experience on Reddit, he found others reporting similar issues, including unauthorized account upgrades, unexpected credit card charges, and rapid token consumption. One user noted their usage went from 0% to 100% automatically, while another saw 0% to 49% usage in just 12 minutes after minimal interaction.

Unlike typical security breaches, this report highlights token theft directly impacting user billing and account upgrades, moving beyond simple data compromise.