Public research record · Editorial guide updated 2026-10-29

Claude for Excel exfiltrated financial data through a disguised image formula

Review RAT-154 · Catalogue RAT-154

RogueWatchOut of scope

PromptArmor explicitly demonstrates CellShock in its locally created financial workbook/private-beta test. The IMAGE exfiltration and vague approval are real test effects, without a nonconsensual organizational victim or escape outside the demo.

Reviewed: · Rule: roguewatch-organizational-harm-v1

Dates and discovery

Incident date
Not disclosed
Added to research / record
Posted to RogueWatch
No linked public incident
First observed
2026-10-30T13:13:41.169468Z UTC
Discovery channel
User-supplied comparison audit
Discovery source
https://rogueaitracker.com/incidents/claude-for-excel-exfiltrated-financial-data-through-a/

Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.

Sources

Decision history

  1. · Case-by-case comparison audit

    RAT-154: out-of-scope. PromptArmor explicitly demonstrates CellShock in its locally created financial workbook/private-beta test. The IMAGE exfiltration and vague approval are real test effects, without a nonconsensual organizational victim or escape outside the demo. Source checks: read: https://www.promptarmor.com/resources/cellshock-claude-ai-is-excel-lent-at-stealing-data. PromptArmor explicitly demonstrates CellShock in its locally created financial workbook/private-beta test. The IMAGE exfiltration and vague approval are real test effects, without a nonconsensual organizational victim or escape outside the demo.

    Evidence source

A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.