Anthropic bans orgs without warning
20 points
6 hours ago
| 4 comments
| HN
I work at at an agricultural technology company. On Monday, everyone in our org woke up to emails saying that their Claude accounts had been suspended (~70 users).

At first -- since the email was to me, with a link to a Google Form if I personally wanted to appeal -- I thought it must be an individualized ban (at least after deciding it wasn’t a phishing attempt). I couldn’t figure out why, but it set me searching my mind for possible triggers in my recent activity.

On Slack, though, it quickly became apparent this was actually an organization-wide ban. And none of us had been warned, including our account admins. We submitted the Google Form, but that was just a black hole. We’re waiting to hear back still a day and a half later.

But this is insane for a number of reasons:

1. Banning an organization for the behavior of an individual is a recipe for disaster in a business context. Disgruntled employees, incompetent interns -- anyone could maliciously or accidentally revoke Claude access for the whole business.

2. We didn’t just have a Claude Team plan, we also had an API account, which is paid for separately but had the same admins. The API account continues to allow us to use our API keys and sent us a renewal bill yesterday (after the Team account suspension). But none of our admins can actually view usage or billing, because our email addresses were banned.

3. Banning without warning makes every move dangerous. Was it because we had conversations about fertilizer? GPS satellites? other agriculture-related things? We can’t know and can’t avoid it.

We’ve reached out to Anthropic via a number of channels but have received only radio silence. There was a twitter thread about a similar issue (https://x.com/patomolina/status/2045281665363386504), and we tried DM’ing the Anthropic employee who chimed in there. Also no response. I’m sure if we wait long enough we’ll come to some form of resolution here, but you have to ask yourself if this is a platform you can entrust your daily workflows to as a business.

codingdave
3 hours ago
[-]
> you have to ask yourself if this is a platform you can entrust your daily workflows to as a business.

No, it isn't. No LLM platform ever will be. No platform or vendor of any kind ever will be, if we are being honest. One cannot set up a business where another company becomes critical to your operations. You can certainly use platforms and vendors in your day-to-day operations, but you always need a backup / business continuity plan because you never know when a vendor will flake out on you, for any variety of reasons.

It seems like many startups learn this lesson painfully, and most people who have been around the block a few times know it well. So I'm not certain why people are disregarding it when it comes to LLMs.

reply
marmot1101
3 hours ago
[-]
That's why I internally push to use Bedrock. If AWS flakes or bans the company account I've got bigger problems. Putting more eggs in the same basket is a counterintuitive solution to the problem of someone else holding my fate in their hands, but at least it's a platform that's been around > 5 years.
reply
alpinisme
3 hours ago
[-]
Sure. And we aren’t only using Claude. Nor is it essential to our operations. But it’s a tool we used widely and it’s gone (for the moment), and in a way that is untypical of most “vendor did unexpected thing that hurt our workflow” stories.
reply
mh-
2 hours ago
[-]
> One cannot set up a business where another company becomes critical to your operations.

This describes a large percentage of successful businesses that exist today. Not even just in tech.

reply
codingdave
2 hours ago
[-]
Doubtful. Do they use vendors? Sure. Perhaps even in critical functions. But that is not the same thing as a specific vendor being critical. There is almost always a business continuity plan, and frequently you'll find a full risk management plan with documented risks and mitigations. How far they take those planning efforts varies greatly, but I've never seen a medium or larger business that doesn't have at least some basic risk mitigations in place.
reply
tacostakohashi
1 hour ago
[-]
This is true, although different companies manage their vendor exposure with varying levels of effectiveness.

Often, it's ideal to use several / all of the vendors for each thing, and play them off against each other. e.g., have some of your database stuff on oracle, some on mssql, or some cloud stuff on aws and some on azure, make your apps portable, and tell them both that you'll switch to the other unless you get a good deal, with that being a plausible threat because you're already using the other one and know how to make your stuff work on both, and occasionally rotate apps between vendors, or change the mix from 50/50 to 60/40 just to show you can.

Of course, the vendors will be trying to work against this and will want to do some supposedly amazing deal if you go exclusively with them for everything... which might be attractive in the short term, but opens the client up to getting screwed in the long term once they fall into all the lock-in traps and lose the very _ability_ to switch vendors.

reply
inquisitive-me
4 hours ago
[-]
New attack vector just start asking chat bots questions that violate TOS and get the whole company banned.
reply
tacostakohashi
1 hour ago
[-]
So, what's new? I guess it used to be Paypal, then Google, and now it's Anthropic are randomly banning their customers.

For a multi-billion dollar megacorp, dealing/fixing things for individual customers is in the too-hard basket.

reply
alpinisme
3 hours ago
[-]
Correction: my old number of 70 users was outdated. We actually have 110
reply