Anthropic has been signing Claude users out and removing the payment method saved on their accounts. In an email to affected customers the company explains why. Infostealer malware copied their Claude login sessions from their PCs, and a bad actor used them to burn through paid usage. No password or two-factor code was needed.