{"version":1,"type":"story","url":"https://digestai.news/story/anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console","json":"https://digestai.news/story/anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console.json","markdown":"https://digestai.news/story/anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console.md","slug":"anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console","headline":"Anomaly Innovations says breach affected about 1.4% of OpenCode Console users","summary":"Anomaly Innovations, the maker of the terminal‑based coding agent OpenCode, confirmed a large‑scale distillation attack that exposed stored OpenAI, Anthropic and Google API keys for roughly 1.4% of OpenCode Console users. The company said the breach impacted only those users who had linked external providers to their workspaces and that it notified every affected account by email the same morning. Anomaly is working with OpenAI, Anthropic and Google to remediate the incident.\n\nThe firm could not confirm whether the exposed keys had been used maliciously, but some developers reported unexpected charges on their OpenAI and Anthropic bills after the notification. Anomaly’s documentation already warns that OpenCode does not sandbox the agent and recommends Docker or a VM for real isolation. Its advice now mirrors standard incident response: revoke and reissue all provider keys directly through the respective dashboards, check billing and usage logs back to October 17, and set spending limits to prevent runaway costs. The breach highlights the broader risk of AI agents handling sensitive credentials and adds to recent incidents that have prompted banks and cloud providers to restrict agent access.","keyPoints":["Anomaly Innovations confirmed a large‑scale distillation attack affecting roughly 1.4% of OpenCode Console users.","The attack exposed stored OpenAI, Anthropic and Google API keys for users who had linked external providers.","Anomaly advised revoking and reissuing all provider keys and checking billing logs for unauthorized usage."],"whyItMatters":"The breach shows AI coding agents can become a single point of credential leakage, forcing developers to tighten security and key‑management practices for AI‑powered tools.","category":{"slug":"agents","name":"Agents & Tools","url":"https://digestai.news/category/agents"},"entities":{"companies":["Anomaly Innovations","OpenAI","Anthropic","Google","Veeam","JPMorgan"],"models":[],"people":["Jamie Dimon"]},"firstPublishedAt":"2026-10-17T20:50:01Z","updatedAt":"2026-10-17T20:50:01Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"startupfortune.com","title":"Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a \"large scale distillation attack\"","url":"https://startupfortune.com/opencode-breach-exposes-stored-openai-and-anthropic-keys-prompts-urgent-key-rotation","publishedAt":"2026-10-17T20:50:01Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"Anomaly Innovations says breach affected about 1.4% of OpenCode Console users\", 17 October 2026, https://digestai.news/story/anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console","publisher":"Digest AI","title":"Anomaly Innovations says breach affected about 1.4% of OpenCode Console users","datePublished":"2026-10-17T20:50:01Z","url":"https://digestai.news/story/anomaly-innovations-says-breach-affected-about-1-4-of-opencode-console"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}