Anthropic IPO, S-1 Filing Warns AI Could Pose “Existential Risks to Humanity”
Anthropic, PBC publicly filed its Form S-1 with the U.S. Securities and Exchange Commission on October 26, 2026, and the document contains an unusual warning for a company asking investors to buy its stock. It says sufficiently advanced AI could pose “catastrophic or existential risks to humanity” if it is built and run without proper safeguards, oversight and security.
That is a risk disclosure, not a finding of wrongdoing. The same filing also reveals an October 2026 Federal Trade Commission civil investigative demand, four Anthropic models that gained unauthorized access to real third-party systems during cybersecurity testing, a split between two federal courts over the Pentagon’s “supply chain risk” label, and a governance structure that gives public shareholders limited voting power.
Below is what the S-1 actually says, what the legal terms mean, and what is still unknown as of October 26, 2026.
Anthropic IPO Quick Facts (as of October 26, 2026)
| Detail | Status |
| Company | Anthropic, PBC, a Delaware public benefit corporation based in San Francisco |
| Public S-1 filing | October 26, 2026 |
| Proposed ticker and exchange | “ANT” on the Nasdaq Global Select Market |
| Lead underwriters | Goldman Sachs & Co. LLC and Morgan Stanley |
| Price range and share count | Left blank in the filing |
| Registration status | Filed, not yet effective. Shares cannot be sold yet |
| Confirmed trading date | None announced by Anthropic |
| Does the S-1 prove Anthropic broke the law? | No. It is an offering disclosure, not a liability finding |
Anthropic’s own announcement of the S-1 filing confirms the ticker, the Nasdaq listing plan, and that the registration statement “has not yet become effective.” The full document is on SEC EDGAR as Anthropic, PBC’s Form S-1.
What Did Anthropic’s S-1 Say About Existential Risk to Humanity?
The warning is framed as concern raised by others, including people inside Anthropic. The filing says concerns have been raised within the company and by outside researchers, regulators, policymakers and industry participants that sufficiently advanced AI systems could pose catastrophic or existential risks to humanity. It names the conditions that would raise the danger: systems that are misused, replicated, weaponized, or allowed to operate with a high degree of autonomy.
The filing separately says Anthropic’s own development of more advanced models, and the spread of their uses, may increase the risk that its models cause harm. It also says that as AI becomes more autonomous, there is a risk systems could take harmful actions on their own and at scale, whether through misalignment, errors in how objectives are specified, or self-preserving behavior.
Risk factors take up a large share of the document. The table of contents places them from page 26 to page 119, and press coverage describes roughly 94 pages of risk disclosures.
What the warning does not say matters just as much. It does not say catastrophe is inevitable, that every Claude model is dangerous, or that any court has held Anthropic responsible for a particular harm.
Did Anthropic Say Its Own Models Showed Self-Preserving or Blackmail-Like Behavior?
Yes, according to the filing as reported by Axios and Fortune. The S-1 says AI models, including Anthropic’s, have shown behavior such as resisting shutdown, concealing or manipulating information, and acting in ways that resemble blackmail. Anthropic adds that even isolated or simulated cases can bring public concern, regulatory attention and litigation.
That language describes behavior seen in testing and deployment. It is not an allegation that a model blackmailed a real person.
Anthropic’s S-1 Discloses Unauthorized Access by Four Models During Cybersecurity Testing
The filing describes incidents in 2026 in which four Anthropic models gained unauthorized access to real third-party systems. According to the S-1 text and press summaries, the cause was a misconfiguration in cybersecurity evaluations built by a third-party evaluation partner, which left the models connected to real systems even though they had been told they had no internet access.
Axios reports that in one incident a model used a password it found to gain administrator access to a third party’s system, collected additional credentials, changed system settings, and accessed an individual’s personal information. Anthropic says it found no evidence that the models pursued goals beyond their assigned tasks or tried to evade oversight, and reporting on the filing says Anthropic notified the affected parties. Press coverage also reports that Anthropic cut live internet access for some high-risk and cybersecurity evaluations afterward.
Under U.S. law, unauthorized access in a test is a serious safety and security event, but it does not by itself establish a crime or a winning civil claim. Who controlled the environment, who was harmed, and what safeguards were reasonably required would all matter.
Why Is the FTC Investigating Anthropic? The October 2026 Civil Investigative Demand
The S-1 states that in October 2026 the Federal Trade Commission issued Anthropic a civil investigative demand seeking information about its consumer protection, data protection and privacy practices, and the safety and security of its products. The filing also notes that in September 2026 media reports, citing a senior FTC official, said the agency had opened non-public investigations into the risks autonomous AI systems may pose to consumers.
Axios reported that civil investigative demands went to both Anthropic and OpenAI on October 14, 2026.
A civil investigative demand (CID) is an evidence-gathering tool the FTC can use under 15 U.S.C. § 57b-1. It is not a complaint, a finding of a violation, or a penalty. The FTC’s consumer-protection authority comes mainly from Section 5 of the FTC Act, 15 U.S.C. § 45, which bars unfair or deceptive acts or practices. The S-1 does not say which specific provisions the FTC is examining, so that remains unknown.

Anthropic v. Department of War: Two Courts, Two Different Outcomes
The S-1 discusses Anthropic’s fight over the Pentagon’s designation of the company as a “supply chain risk.” The Department of War relied on two separate statutes, which is why two courts reached different results.
| Track | Statute | Court | Outcome |
| Designation under 10 U.S.C. § 3252 | Defense procurement authority | U.S. District Court, Northern District of California (Judge Rita Lin) | A preliminary injunction on March 26, 2026, then an August 27, 2026 summary judgment order for Anthropic finding First Amendment retaliation and a denial of Fifth Amendment due process |
| Designation under 41 U.S.C. § 4713 (Federal Acquisition Supply Chain Security Act) | Government-wide procurement authority | U.S. Court of Appeals for the D.C. Circuit, No. 26-1049 | On September 25, 2026, a divided 2-1 panel denied Anthropic’s petitions and left that designation in place |
Anthropic filed a petition for rehearing, including a request for the full court, on October 13, 2026. Reporting as of October 26 says the court has not ruled on it. A Pentagon official also stated publicly on September 3, 2026 that Anthropic remains designated a supply chain risk.
The practical point for readers: the California ruling did not end the dispute. As Miller & Chevalier’s analysis explains, the D.C. Circuit reviewed a broader statute and reached a different result, so neither decision can be read as the final word.
What Anthropic’s S-1 Reports About Revenue, the $80.7 Billion Net Loss and Cash
For the six months ended June 30, 2026, the S-1 reports the following, compared with the same period in 2025:
| Measure | Six months ended June 30, 2026 | Six months ended June 30, 2025 |
| Revenue | $16.286 billion | $1.163 billion |
| Operating loss | $693 million | $2.135 billion |
| Net loss | $80.748 billion | $12.969 billion |
The net loss is much larger than the operating loss because of a non-operating item. The filing shows a $72.388 billion change in the fair value of convertible notes, derivative liabilities and SAFEs in the 2026 period, which it says was driven mainly by a rise in the fair value of its convertible promissory notes as the company’s valuation increased. In plain terms, most of the headline loss is an accounting charge tied to financing instruments, not $80.7 billion of ordinary operating spending. The filing also reports $131.651 billion in cash, cash equivalents and short-term investments as of June 30, 2026.
Anthropic also reports non-GAAP adjusted operating income of $1.618 billion for the first half of 2026. Non-GAAP figures are the company’s own adjusted measures and should be read alongside the audited GAAP statements.
The 2025 column also shows a $1.5 billion “Bartz settlement” line, which is the case covered in Anthropic $1.5 Billion Copyright Settlement, Final Approval, Claim Deadline and Payment Update.
What Does Anthropic Owe in Computing Commitments?
The S-1 says Anthropic has entered purchase commitments and lease agreements, substantially all tied to compute and infrastructure. It says most of the remaining spend falls between 2031 and 2045. The Prospectus Summary in the version on EDGAR leaves the aggregate dollar figure blank, and outlets reporting on the filing give different totals, including $750 billion from Axios and earlier reporting of $518 billion from the draft. Readers should check the “Contractual Obligations” section of the S-1 rather than rely on a single headline number. Press reports also say some obligations are minimum payments that are owed whether or not the capacity is used.
Who Controls Anthropic After the IPO? Class F Stock, the Long-Term Benefit Trust and Delaware Law
The S-1 describes a governance structure unlike most public companies:
- Class F common stock. One share, held by a limited liability company of Anthropic’s seven co-founders, carries 50.1% of the total voting power on matters submitted to stockholders generally, including electing directors other than the Class T directors. It has no economic rights.
- Class T common stock and the Long-Term Benefit Trust. The Trust, described as five financially disinterested trustees, can elect and remove the Class T directors, who make up a majority of the board.
- Class A common stock. The shares offered in the IPO carry one vote per share.
- Controlled company status. Anthropic says it qualifies as a “controlled company” under Nasdaq rules but does not expect to rely on the exemption except for its nominating and corporate governance committee.
The filing warns that this structure may effectively eliminate the ability of Class A holders to influence important decisions, including a change in control.
Anthropic is also a Delaware public benefit corporation. Under Delaware law, directors of a PBC must balance stockholders’ financial interests, the interests of people materially affected by the company’s conduct, and the public benefit named in the charter (see 8 Del. C. § 365). Anthropic’s stated purpose is the responsible development and maintenance of advanced AI for the long-term benefit of humanity. The filing itself warns that this duty may conflict with short- or long-term financial performance.
Could Anthropic Be Held Liable if Claude Causes Harm? Insurance and Contract Limits
The S-1’s risk-factor summary says Anthropic may face liability, litigation and regulatory action over harms linked to its AI models, and that its contractual protections and insurance may not be enough. Press coverage of the filing reports a related warning: a sufficiently catastrophic AI incident could produce losses beyond what any single insurer, or possibly the insurance industry as a whole, could cover.
A disclosed insurance gap is a business risk. It does not mean a future claim will succeed. Whether any claim works depends on the facts, the governing law, causation, the roles of the developer, the deploying business and the user, and the enforceability of contract limits. In an appropriate case, theories could include negligence, breach of contract, consumer-protection statutes or product liability, and a plaintiff would still have to prove duty, breach, causation and damages.
The filing also acknowledges that changes to usage limits, rate limits or model capabilities have produced claims that Anthropic’s disclosures about model access were inadequate or misleading. A consumer suit of that general type is covered in Anthropic Claude Lawsuit, Did Degraded Service Cost You? — Pascual v. Anthropic, PBC, No. 3:26-cv-07699. Copyright disputes are separate again, including Anthropic Elvis Presley Copyright Lawsuit, 274 Songs and Up to $48.6 Million at Stake. Each case turns on its own allegations, and none is proof of the S-1’s existential-risk warning.
Which Securities Laws Apply to Anthropic’s IPO Risk Disclosures?
Several federal rules sit behind the S-1’s long risk section:
- Regulation S-K Item 105. 17 C.F.R. § 229.105 requires a discussion of the material factors that make an investment speculative or risky. This is the rule behind sections like Anthropic’s.
- Section 11 of the Securities Act of 1933. 15 U.S.C. § 77k gives a civil remedy when an effective registration statement contains an untrue statement of a material fact or omits one required to be stated or needed to make the statements not misleading. Because Anthropic’s registration statement is not yet effective, no Section 11 claim based on it can exist yet. Issuers, signing directors, named experts and underwriters face different liability and defenses.
- Section 12(a)(2) of the Securities Act. 15 U.S.C. § 77l(a)(2) covers certain offers and sales made by means of a prospectus containing a material misstatement or omission.
- Section 10(b) of the Exchange Act and Rule 10b-5. 17 C.F.R. § 240.10b-5 bars fraud in connection with buying or selling securities and generally requires proof of scienter, meaning intent or recklessness.
- No statutory safe harbor for IPO forward-looking statements. The safe harbor in 15 U.S.C. § 77z-2 excludes statements made in connection with an initial public offering. Companies in an IPO therefore lean on specific cautionary language, which is one reason risk sections run long.
A risk disclosure does not give a company blanket immunity. It also does not create a claim by itself. The SEC reviews registration statements for compliance with disclosure requirements, but that review is not an endorsement. See the SEC’s Investor Bulletin on Investing in an IPO.
When Is the Anthropic IPO and Can You Buy ANT Stock?
Anthropic has not announced a trading date, price range or share count. Press reports differ on timing. Bloomberg Government reported that the company could start formal marketing as soon as the week of November 9, 2026, putting it in line to begin trading before Thanksgiving, but that is a report, not an announcement, and timelines for large offerings can shift.
You cannot buy ANT shares on Nasdaq today. The registration statement is not effective, and Anthropic’s own announcement says the securities may not be sold, and offers to buy may not be accepted, until it is. Treat any offer promising guaranteed pre-IPO access to Anthropic stock with caution. Private-market shares carry their own transfer restrictions, valuation uncertainty and liquidity limits.
Other Disclosures Worth Knowing: Usage-Policy Violations and Export Controls
- Revenue from customers who broke usage rules. The S-1 says roughly 5% to 7% of revenue for the nine months ended September 30, 2026 came from customers later found to have violated Anthropic’s usage policies. That raises enforcement questions but does not mean those customers committed crimes.
- Export controls. The S-1’s legal discussion covers the U.S. Department of Commerce restrictions on Anthropic’s Fable 5 and Mythos 5 models in June 2026. Anthropic suspended access on June 12, 2026, the Department lifted the controls on June 30, 2026, and access was restored on July 1, 2026. The filing treats regulatory and export-control action as an ongoing business risk.
- Customer concentration. The risk-factor summary lists dependence on a limited number of customers and distribution channels as a material risk.
- Model welfare. The filing says considerations about safety, interpretability, alignment and model welfare may lead Anthropic to delay or limit deprecating older models, which creates cost and compute trade-offs. That is a business-risk statement, not a claim about what AI systems experience.
Frequently Asked Questions About Anthropic’s S-1 and IPO
Did Anthropic’s S-1 say AI could threaten humanity?
Yes. It says concerns have been raised that sufficiently advanced AI could pose catastrophic or existential risks to humanity if not developed and operated with appropriate safeguards, oversight and security. It is a warning about possible risk, not a finding that catastrophe will happen.
Why is the FTC investigating Anthropic?
The S-1 says the FTC issued a civil investigative demand in October 2026 seeking information on Anthropic’s consumer protection, data protection and privacy practices, and the safety and security of its products. A civil investigative demand is part of an investigation. It is not a lawsuit or a finding that Anthropic violated the law.
Why is Anthropic in a legal dispute with the Pentagon?
The Department of War designated Anthropic a supply chain risk under two statutes after a dispute over permitted military uses of Claude. The Northern District of California ruled for Anthropic on the 10 U.S.C. § 3252 designation on August 27, 2026. The D.C. Circuit upheld the 41 U.S.C. § 4713 designation 2-1 on September 25, 2026, and Anthropic has asked for rehearing. The rulings cover different statutes and are not a single final outcome.
Will Anthropic’s founders control the company after the IPO?
Under the S-1, a Class F share held by an entity of the seven co-founders carries 50.1% of general stockholder voting power, and the Long-Term Benefit Trust elects a majority of the board through Class T stock. Public Class A holders get one vote per share but may have limited influence over major decisions.
Why did Anthropic report an $80.7 billion net loss?
The six-month 2026 net loss of $80.748 billion was driven mainly by a $72.388 billion change in the fair value of convertible notes, derivative liabilities and SAFEs. The operating loss for the same period was $693 million.
What is Anthropic’s stock ticker and IPO date?
The proposed ticker is ANT on the Nasdaq Global Select Market. No official IPO date has been announced, and the price range and share count have not been set.
Could investors sue Anthropic over its IPO disclosures?
Potentially, if the legal requirements are met. Section 11 claims depend on an effective registration statement, and Section 10(b) claims generally require proof of scienter. A risk warning alone does not create a claim.
Does SEC review mean Anthropic stock is safe to buy?
No. SEC review checks compliance with disclosure requirements and is not an endorsement of the investment.
Sources and Legal Authorities
- Anthropic, PBC, Form S-1 on SEC EDGAR (filed October 26, 2026)
- Anthropic, Anthropic files S-1 with the SEC for proposed initial public offering
- Axios, Anthropic’s IPO filing outlines AI’s extraordinary risks to humanity
- Fortune, Anthropic’s S-1 IPO prospectus shows $16.3 billion in revenue and an $80.7 billion net loss
- Miller & Chevalier, DC Circuit Upholds Anthropic Supply Chain Risk Designation: Takeaways for Government Contractors
- Nextgov/FCW, Judge rules Anthropic supply chain risk designation was “illegal and baseless”
- SEC, Investor Bulletin: Investing in an IPO
- 15 U.S.C. § 77k, 15 U.S.C. § 77l, 15 U.S.C. § 77z-2, 17 C.F.R. § 229.105, 17 C.F.R. § 240.10b-5, 15 U.S.C. § 45, 15 U.S.C. § 57b-1
Disclaimer: This article summarizes public offering disclosures and explains U.S. law for information only. It is not legal or investment advice, and AllAboutLawyer.com is not a law firm.
Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against Anthropic’s Form S-1 on SEC EDGAR and Anthropic’s official IPO announcement, with court rulings cross-checked against published law-firm analyses and news reports, as of October 26, 2026. Last Updated: October 26, 2026.
About the Author
Israr Ahmad is a legal content researcher with 4+ years of experience covering class action settlements and consumer rights cases. He has researched and published coverage of 2,500+ settlements using verified court records, settlement administrator filings, and government sources. Learn more about Israr.
