
The United States District Court for the Northern District of California granted Anthropic’s motion for a preliminary injunction, finding it likely to succeed in challenging federal actions that barred it from government work and that labeled it a national security supply chain risk.
Plaintiff AI company Anthropic PBC sued defendant U.S. Department of War and other federal defendants after the government moved to cut it off from federal contracts, pressure defense-related companies to stop working with it, and designate it a supply chain risk. Plaintiff alleged the measures were unlawful retaliation for its public criticism of defendant’s demand that Claude be available for all lawful military uses, including mass surveillance of Americans and lethal autonomous warfare.
Requested relief
Plaintiff asked the court to preliminarily enjoin defendant from implementing or enforcing three challenged actions: (1) a presidential directive ordering agencies to stop using Anthropic technology, (2) a directive from Secretary Pete Hegseth cutting Anthropic off from military-related commercial relationships, and (3) the Department of War’s supply chain risk designation. Plaintiff argued these actions violated the First Amendment, the Fifth Amendment, and the Administrative Procedure Act.
Court’s ruling
The court granted the preliminary injunction in a modified form (that varied from what Anthropic had proposed). It concluded plaintiff was likely to succeed on its First Amendment retaliation claim, its procedural due process claim, and its APA claims that the supply chain risk designation and Hegseth directive were contrary to law, exceeded statutory authority, and were arbitrary and capricious. The court also found plaintiff had shown irreparable harm, that the equities and public interest favored relief, and that a nominal $100 bond was sufficient.
Why it ruled
The court found the record supported an inference that defendant acted to punish plaintiff for speaking publicly about AI safety and for criticizing the government’s contracting position, rather than to address a genuine national security threat. It said the broad federal ban and supply chain risk label went far beyond simply stopping use of Claude, and it emphasized that the Department of War had previously praised Anthropic and raised no comparable security concerns until the public dispute. The court also found serious procedural flaws, including lack of notice and opportunity to respond, and held that the statutory supply chain risk framework did not fit plaintiff’s conduct because the record did not show sabotage, subversion, or any reasoned determination that less intrusive measures were unavailable.
Anthropic PBC v. U.S. Department of War, et al., Case No. 26-cv-01996-RFL (N.D. Cal. Mar. 26, 2026)









