An Accenture contractor connected a personal Claude Code account to a Department of Defense system holding controlled unclassified information. The agent operated on the network for two months and apparently sent system details, including login credentials, to a high-risk third-party website.