Two data exposures at Anthropic in under a week.

And both of them trace back to the same root cause: gaps in OPERATIONAL discipline.

First, nearly 3,000 unpublished assets left in a publicly searchable CMS because the default setting was public and nobody enforced a policy to change it.

Then days later, a source map file ships with a routine Claude Code npm update, exposing 500,000+ lines of source code. A known Bun bug had been open for 20 days. Nobody caught it before it hit production.

No customer data was compromised. But this is exactly why DevOps matters.

Build pipeline hygiene.

Environment configuration audits.

Automated checks that catch what humans miss before it ever leaves the gate.

Default settings that are secure by design, not by hope. These aren't nice to haves. They're the guardrails that keep your entire operation from becoming a headline.

If your CI/CD pipeline doesn't have a gate that flags debug artifacts, misconfigured defaults, or known upstream bugs before deployment, you're one npm publish away from the same story.

Shipping fast is great.

Shipping safely is the job.

More detailed breakdown coming soon. Stay tuned.