A lawyer at Binnall Law Group used Anthropic's Claude Console to draft a court motion, which resulted in the inclusion of non-existent 'phantom' legal quotations. The attorney admitted to failing to verify the AI-generated content and apologized to the federal judge. The firm has since committed to implementing additional safeguards and training regarding the use of AI in legal practice.
A Binnall Law Group attorney reportedly used Anthropic's Claude Console to draft a motion to quash a subpoena in litigation over Trump administration layoffs, then filed a version containing "phantom" quotations that did not appear in the cited cases. The attorney apologized to U.S. District Judge Susan Illston, and the firm said it would add safeguards and training after calling the AI-generated errors unacceptable.
Risk classification
- Primary risk domain: 3 Misinformation
- Primary risk subdomain: 3.1 False or misleading information
The Claude AI system generated false and misleading legal citations ('phantom' quotations) that were subsequently submitted in a federal court filing.
Additional risk subdomains
- 5.1 Overreliance and unsafe use: The attorney relied on the AI-generated draft for a critical legal filing without verifying the accuracy of the citations.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The incident was caused by the Claude AI system generating hallucinated legal citations during its post-deployment use by an attorney.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Risk Level 3: Limited Risk. The system used was Anthropic's Claude Console, which functions as a chatbot and text generation tool, falling under the category of AI-generated content.
AI system and alleged parties
- AI system: Claude Console (Anthropic)
- AI purpose: Writing Assistant; Technical Text Generation
- Behaviour type: Assistant
- Alleged developer: Anthropic
- Alleged deployer: Jason Greaves, Binnall Law Group
- Alleged harmed parties: Parties in Trump administration layoffs, Parties in American Federation of Government Employees, AFL-CIO v. Trump, Judicial integrity, Joseph Guy, Epistemic integrity
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 3
Potential causes
Management
- Inadequate Policy Enforcement: Management failed to ensure adherence to policies restricting AI tool use.
- Lack of Supplemental Training: Attorneys lacked sufficient training on risks associated with generative AI.
Technology
- AI Generation of Phantom Quotes: Claude Console generated non-existent legal citations in the draft.
- Lack of Built-in Fact Checking: The AI tool lacked automated verification against real legal databases.
Data Inputs
- Unverified Draft Text: The initial text input to the filing contained unverified AI outputs.
Human Factors
- Failure to Vet AI Results: The attorney failed to adequately review and verify the AI-generated text.
- Tight Time Constraints: Severe time pressure contributed to the failure to properly review the filing.
- Overreliance on AI Output: The attorney trusted the AI's generated citations without verification.
Process and Methods
- Bypassing Verification Policies: Firm policies requiring independent verification of AI content were bypassed.
- Inadequate Drafting Safeguards: The workflow did not enforce cross-referencing AI text with legal databases.
Regulatory Environment
- Lack of Strict AI Court Rules: Existing court rules rely on retroactive sanctions rather than prevention.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide clear, direct, and uncontradicted details about the incident, including the specific AI tool used (Claude Console), the law firm involved (Binnall Law Group), the lawyer's admission of responsibility, and the nature of the AI's failure (generating three phantom quotations).
An attorney at Binnall Law Group submitted a federal court filing containing three AI-generated 'phantom' citations after failing to verify a draft produced by Anthropic's Claude. The incident represents a minor, localized disruption to judicial proceedings that was quickly resolved through standard court oversight, carrying negligible broader national security implications.
- Overall national security impact: Minor
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: Individual
Threat characteristics
- Imminence: Long-term. The specific court incident is resolved, though the broader issue of AI hallucinations in professional settings remains an ongoing concern.
- Autonomy: Human-controlled. The AI system was used as a drafting assistant, with the human attorney retaining final control and responsibility for the filing.
- Novelty: Established threat. AI-generated 'phantom' citations in legal filings are an established phenomenon with multiple prior documented cases.
Impact by dimension
- Physical security: Negligible. No physical security threat or critical infrastructure impact occurred. This was a localized legal document drafting error.
- Information security: Negligible. No intelligence compromise, classified data theft, or systematic information warfare campaign was detected.
- Sovereignty: Minor. The incident briefly introduced fabricated citations into a federal court proceeding, but it was quickly resolved via standard judicial oversight and attorney apology.
- Economic security: Negligible. There was no threat to economic stability, strategic industries, or national technological competitiveness.
- Societal stability: Negligible. The incident had no impact on societal stability, civil liberties, or population-scale safety.