OpenCode Console breach may have exposed OpenAI, Anthropic and Google keys of 1.4% of users
What happened
OpenCode said an intruder reached its hosted Console overnight into 17 October. Provider API keys of about 1.4 percent of Console users may have been exposed, and some users reported unauthorized charges on their AI accounts. OpenCode describes it as a large-scale distillation attack.
OpenCode is an open-source AI coding agent. Its Console is a hosted service where some users store third-party AI provider keys. OpenCode announced the breach on Saturday 17 October, and BleepingComputer gives 00:30 UTC that day as the earliest possible key exposure. OpenCode emailed affected users and told them to revoke and replace their provider keys, saying anyone without an email was not affected.
Users reported unauthorized charges from several hundred dollars to more than 1,700 dollars across OpenAI, Anthropic and Google accounts, and Google suspended some projects. OpenCode said attackers had been targeting its systems for at least 48 hours using AI agents. It has not said how the intruder got in or how many keys it held.
How it happened
Unknown: Unknown. No source has explained how the incident happened.
Models from several AI vendors were involved. The product was OpenCode, which is open source, a type of coding assistant.
Impact
Data was exposed. Data involved: credentials. The impact was confined to one organization and its users or customers.
Severity is rated High, calculated from how far the incident reached and how sensitive the data was.
Was the AI at fault?
No. The failure was in the systems, settings or people around the AI, not in the model's behaviour.
Status and timeline
Confirmed by the affected organization, the AI vendor, a regulator or a named security research firm.
It became public on 17 Oct 2026.
OpenCode told affected users to revoke and replace their keys and said it was working with Google, OpenAI and Anthropic, with refunds for unauthorized charges underway. Anthropic and Google blocked keys they believed were exposed, and OpenAI said it worked with OpenCode to restore access and refund API customers for credits used in the attack.