Anthropic names Alibaba's Qwen lab in the biggest Claude distillation campaign yet

25,000 fake accounts. 28.8 million Claude conversations. Six weeks. And the thing they were harvesting wasn't trivia, it was software engineering and agentic reasoning.

In a June 24 letter to US senators and the White House, Anthropic alleged that operators tied to Alibaba's Qwen lab ran roughly 25,000 fraudulent accounts to conduct 28.8 million Claude interactions between April 22 and June 5, specifically to extract software-engineering and agentic-reasoning capability (CNBC). This is the first time Anthropic has put a major Chinese conglomerate's name in writing. The campaign on its own exceeds the combined ~16 million exchanges the company previously attributed to DeepSeek, MiniMax, and Moonshot put together. It lands while US export controls already restrict Chinese access to Anthropic's Mythos and Fable 5 models.

Here's what makes this different from the usual "everyone distills everyone" shrug. Distillation used to mean scraping clever answers to look smart on benchmarks. What 28.8 million targeted agentic-coding sessions buys you is the behavioral data to clone how a frontier model plans, calls tools, recovers from errors, and chains steps over a long horizon. That's not the knowledge layer. That's the orchestration layer. And orchestration is exactly the thing I keep saying is the real moat now that writing code is cheap.

The economics are brutal for the labs. If you can reconstruct most of a frontier model's agentic behavior for the cost of API calls routed through stolen accounts, the moat isn't the weights, it's enforcement. Anthropic going to senators instead of just banning accounts tells you they've concluded they can't win this on the platform alone. They want it to be a trade-policy problem.

What should you do about it? Two things. First, if you ship anything where your prompts, tool schemas, or agent scaffolding are the value, assume they're harvestable through normal usage and design accordingly. Rate limits and account verification are now product security, not ops hygiene. Second, watch the next story, because the flip side of "labs can't stop distillation" is that the distilled models are getting really good, really cheap, and they're already in your router.