CyberXero: Claude Code for stealing 628,000 Ukrainian data

The technology news site secnews.gr has published a report headlined 'CyberXero: Claude Code for stealing 628,000 Ukrainian data.' According to the article, an actor or operation identified as CyberXero used Claude Code, with 51 AI agents, and Cobalt Strike to steal 628,000 Ukrainian files. The report places an AI coding tool at the centre of a large-scale data theft in which the volume of data taken is given as 628,000 files.

The excerpt states that Claude Code was used alongside 51 AI agents, and that Cobalt Strike formed part of the operation. Cobalt Strike is named in the article among the tools used; the excerpt does not describe its specific role. The excerpt likewise does not state what the 51 AI agents were used for, whether they ran autonomously or under human direction, or how the 628,000 files were transferred. The article does not name any of the organisations from which the data was taken, identify where the data was moved, or give a date for the operation.

The material available does not attribute CyberXero to any state or to a known criminal group, and does not say whether the files have been recovered, whether any breach notification has been issued, or whether an investigation is under way. It also does not state how the 628,000 figure was established. The report's headline places the AI coding tool Claude Code at the centre of the described theft, with the number of AI agents involved given as 51.