Anthropic Alleges Distillation Theft by Alibaba Qwen Lab

Anthropic sent a letter on June 10, 2026 to Senate Banking Committee Chair Tim Scott and Ranking Member Elizabeth Warren alleging that operators affiliated with Alibaba's Qwen AI lab conducted a coordinated distillation campaign against its Claude models, CNBC reports. Anthropic called it "the largest known distillation attack on Anthropic to date."

Per Anthropic's letter, as reported by CNBC and CryptoBriefing, the campaign ran from April 22 to June 5, 2026, generating more than 28.8 million exchanges with Claude through approximately 25,000 fraudulent accounts. Anthropic described the technique as adversarial distillation -- extracting model behavior from query/response pairs so that a copying model can learn similar capabilities without access to the original weights. The company said the operation specifically targeted capabilities in software engineering and agentic reasoning, per The Next Web.

Per CNBC, Anthropic urged the Banking Committee to impose penalties on entities conducting such extraction, strengthen export controls, and create legal safeguards around model IP. The company framed the issue as a national-security concern rather than a purely commercial dispute, citing the export controls on its Mythos 5 and Fable 5 models as context.

Senators Bill Hagerty (R-TN) and Andy Kim (D-NJ) are moving to introduce an amendment to must-pass defense legislation that would blacklist or sanction entities found conducting adversarial distillation campaigns, CNBC reports. Alibaba had not publicly responded to the allegations as of reporting.

Distillation is a structurally difficult problem to defend against -- query/response pairs are the commercial product, so limiting access necessarily limits utility. The 25,000-account and 28.8-million-exchange scale suggests industrialized operations beyond casual scraping. The legislative response signals that capability extraction may be moving toward a sanctions or trade-law framework rather than solely a terms-of-service matter.

Any Alibaba public response; progress on the Hagerty-Kim defense amendment; whether Commerce expands its export control framework to address distillation explicitly; and whether other frontier model providers disclose similar operations.