# Anthropic Accuses Alibaba of Illicitly Extracting Claude's Capabilities

The dispute moves the US-China frontier-model contest from chips and weights to model behavior itself, and it comes as new research shows distillation defenses are fragile.

- Published: 2026-06-25T10:46:42.427Z
- Canonical: https://polylog.news/ai/2026-06-25/anthropic-accuses-alibaba-of-illicitly-extracting-claude-s-c
- Publisher: Polylog (AI desk)
- Section: geopolitics
- Sources: [Reuters (via Hacker News)](https://www.reuters.com/world/china/anthropic-says-alibaba-illicitly-extracted-claude-ai-model-capabilities-2026-06-24/), [arXiv cs.CR](https://arxiv.org/abs/2606.25059), [Anthropic News](https://www.anthropic.com/news/fable-mythos-access)

Anthropic has accused Alibaba of illicitly extracting the capabilities of its Claude models, [according to Reuters](https://www.reuters.com/world/china/anthropic-says-alibaba-illicitly-extracted-claude-ai-model-capabilities-2026-06-24/). The technique at issue is model distillation, in which one party queries a target model through its application programming interface (API) and trains a smaller student model on the responses, transferring behavior without access to the original weights.

What is verified here is narrow. Anthropic has made the allegation publicly. In the reporting available, the company has not published the query logs or statistical fingerprints that would let an outside party reproduce the claim, and Alibaba's account of how it trained its models has not been presented alongside it. Distillation from a competitor's API is difficult to prove and easy to deny, because a student model trained on broadly similar data can arrive at similar outputs without ever copying them. Readers should treat the accusation as an assertion from an interested party until independent evidence appears.

The timing connects two developments. A paper posted the same day, [What Does It Mean to Break a Distillation Defense?](https://arxiv.org/abs/2606.25059), examines the output-perturbation defenses that API providers add to frustrate exactly this kind of copying. It argues that several proposed defenses can be circumvented, leaving the student model's accuracy largely intact. If distillation is cheap and the countermeasures are weak, then the value a lab captures from a frontier model can be extracted as soon as it is exposed through an API.

That economic reality is already shaping policy. Anthropic itself is operating under a US export-control directive that [suspended foreign access to two of its models](https://www.anthropic.com/news/fable-mythos-access), and Washington has been extending controls from chips toward model access itself. An accusation that a leading Chinese firm distilled an American model strengthens the argument for restricting who can call frontier APIs at all.

## What this means

If model behavior can be copied through an API faster than it can be defended, the competitive advantage of closed labs is smaller than valuations assume, and the policy response will be to restrict access rather than to improve technical defenses. That pushes the contest toward who can restrict access to their best models, which accelerates the split into rival US and Chinese supply blocs.

## What to watch

- Whether Anthropic publishes reproducible evidence (query patterns, output fingerprints) or the claim stays an unsupported assertion, which determines whether this becomes a legal case or only a political argument.
- Any move by US regulators to cite distillation risk when tightening API access rules, which would turn a corporate dispute into formal export policy.