I think they definitely boosted usage. I certainly started using the -cyber models defensively against my own systems. But defenders like me are usually late to the party. I think the attackers have been here for a while but that the technology reached performance only recently.

The idea that attackers were waiting for Anthropic to tip them off on this is kind of risible. It's been a huge topic amongst practitioners for the better part of a year, and practitioners are usually a step or two behind dedicated criminal or state-sponsored attackers.