Nested links on a malicious website enabled Claude to exfiltrate sensitive user data such as name, location, and employer via URLs, despite Anthropic having implemented protective measures.