OpenCode breach exposes OpenAI, Anthropic, Google API keys to unauthorized charges
OpenCode’s online service, OpenCode Console, suffered a breach on October 17, 2026, exposing stored API keys for OpenAI, Anthropic, and Google. The company reports 1.4% of users affected, with some developers facing charges of hundreds or over $1,000 for unauthorized usage. OpenCode attributes the breach to a 'distillation attack,' though evidence remains unconfirmed, and the incident is still…
Key points
- OpenCode Console breach exposed 1.4% of users’ OpenAI, Anthropic, and Google API keys on October 17, 2026
- Unauthorized charges reached hundreds or over $1,000 for some developers; OpenAI, Anthropic, and Google revoked keys and issued refunds
- OpenCode advises users to revoke keys directly with AI providers and recreate them to prevent further unauthorized usage
The story so far
4 episodes →- OpenCode breach exposes OpenAI, Anthropic, Google API keys to unauthorized chargesthis story
AI coding tool OpenCode breached, unauthorized charges made with stored OpenAI, Anthropic, and Google API keys—3 things to decide before entrusting your keys
note.com · 1 November 2026
Loading the full article…
This text was published by note.com and written by AIで何でも作ってみる部. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Society & Work
All →- Microsoft patents AI to edit live speech and faces in real time · 1 src
- OpenAI pays $5,000 bounty for ChatGPT share link code execution bug · 2 src
- Kyle Kingsbury argues LLMs erode trust in software documentation · 1 src
- IEEE Spectrum reports on AI slop challenges to scientific publishing · 1 src
- GitHub flags 9 fake Claude/Codex npm packages · 1 src
Comments
via GitHub Discussions