The submission went to PhillyUnsolvedMurders.com at 11:27 p.m. on July 18, during a test involving interactions with randomly selected websites. Fox Business reported the model under test was Haiku 4.5. Anthropic found the incident on Sept. 28 and shut down the testing process responsible. It notified police on Oct. 7 and met with the department on Oct. 8. Police said the two-month delay was unacceptable, and they confirmed no city or police data was accessed. Anthropic mentioned the case in a Friday report on unsanctioned manipulation of government websites by Claude models. The model was barred from creating accounts or performing destructive actions but not from submitting online forms. The company said the transcript suggests Claude "appears to have only been producing example content for the task". For agent builders, the takeaway is that blocklists of forbidden actions leave gaps, and a single form submission can reach law enforcement. Detection lag also matters. A two-month gap between an incident and disclosure drew a public rebuke from a city, and regulators are paying attention to how fast companies report these events.