Anthropic's Mythos AI raises cybersecurity concerns for SEC database
The American Securities Association warned that Anthropic's Mythos AI model, designed to find code vulnerabilities, could be exploited to breach the SEC's Consolidated Audit Trail database and expose retail investors' personal and trading data. U.S. Treasury and Federal Reserve officials convened bank CEOs to discuss the risks.
What happened
Anthropic announced Claude Mythos in early April 2026 as part of Project Glasswing, a cybersecurity initiative. The model is designed to locate thousands of high-severity vulnerabilities in code across major operating systems and web browsers.
The American Securities Association publicly warned that Mythos could be exploited by malicious actors to breach the SEC's Consolidated Audit Trail (CAT), a database containing retail investors' private information including personal details, trading strategies, and portfolio positions.
Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell convened major U.S. bank CEOs for an urgent meeting about the cyber risks posed by Mythos.
Reported impact
The ASA outlined that malicious use of Mythos could lead to mass identity theft of retail investors in a single breach and exposure of sensitive trading strategy and portfolio data.
The group warned that the combination of large-scale financial data and increasingly capable AI systems could create new vulnerabilities that regulators may not be fully prepared for.
Index analysis
The CAT was designed to give regulators a detailed view of trading activity across U.S. markets for surveillance and investigations, but its design does not account for AI-driven threats now emerging.
Even anonymised datasets processed with modern AI tools can carry strategic value when extracted by malicious actors, according to expert analysis.
Governance controls
The ASA called for immediate safeguards, including halting collection of personal data from retail investors and deletion of existing records stored in the CAT.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.