Hackers are stealing Claude tokens from subscribers

Grant de Swardt, an AI consultant, discovered unauthorized usage draining tokens from his Claude Max 20x subscription. Anthropic confirmed a compromised session key allowed hackers to mint OAuth tokens and misuse his account, leading to a suspension and refund. This issue appears widespread, with other users reporting similar unauthorized charges and token consumption.