PulseAugur
EN
LIVE 18:20:23

OpenCode breach exposes AI API keys for 1.4% of users

By PulseAugur Editorial · [8 sources] ·

OpenCode, an open-source coding agent, experienced a security breach on October 16, 2026, where an intruder accessed a legacy system. This incident potentially exposed API keys for AI services like OpenAI, Anthropic, and Google that were stored in OpenCode Console, affecting approximately 1.4% of its users. Some users have reported unauthorized charges, and while OpenCode has not confirmed if keys were copied or used, it has advised affected users to revoke and recreate their API keys directly with the providers. The breach is suspected to be part of a large-scale "distillation attack," where stolen keys are used to train new AI models, though other motives like key resale or direct billing are also possible. AI

IMPACT Highlights risks of using third-party services to manage AI API keys, potentially impacting enterprise adoption of AI tools.

RANK_REASON Security breach affecting a tool used by developers, with potential financial impact.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 8 sources. How we write summaries →

OpenCode breach exposes AI API keys for 1.4% of users

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security breach affecting a tool used by developers, with potential financial impact.
Source corroboration
8 independent sources
Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
24 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [8]

  1. dev.to — Anthropic tag TIER_1 English(EN) · Hacks.gr ·

    OpenCode breach may have exposed users' digital keys

    <p>An intruder reached a legacy system at OpenCode, potentially exposing third-party AI provider keys saved in the OpenCode Console for 1.4% of users.</p> <p>Some developers report unauthorized charges, prompting advice to revoke keys in provider dashboards.</p> <p>The incident o…

  2. dev.to — Anthropic tag TIER_1 Español(ES) · Henry Ramirez ·

    API Keys Exposed in OpenCode Breach

    <p>Las claves API expuestas en la brecha de OpenCode obligan a revocar hoy mismo las credenciales de OpenAI, Anthropic y Google que muchos desarrolladores guardaron en Console, el servicio en la nube de ese agente de programación. Una clave API, la credencial que una aplicación u…

  3. Medium — Claude tag TIER_1 English(EN) · Dreamfind ·

    OpenCode got hacked: everything you need to know about the Console key breach

    <div class="medium-feed-item"><p class="medium-feed-image"><a href="https://medium.com/@dremfind/opencode-got-hacked-everything-you-need-to-know-about-the-console-key-breach-291ec5fe14c2?source=rss------claude-5"><img src="https://cdn-images-1.medium.com/max/1672/1*1C7-PPoH18bO6e…

  4. dev.to — LLM tag TIER_1 English(EN) · Clydara ·

    OpenCode's Console breach: when a middleman holds your API keys

    <p>OpenCode, the open-source coding agent, disclosed on October 17, 2026 that an intruder reached a legacy system on the night of October 16 and that provider API keys saved in OpenCode Console "may have been exposed". About 1.4% of Console users were affected. If you only run th…

  5. dev.to — LLM tag TIER_1 English(EN) · frank chu ·

    OpenCode's breach exposed provider keys for 1.4% of Console users. I checked what that number can and can't tell you.

    <p>On Saturday, OpenCode — the open-source coding agent built by Anomaly Innovations — told some of its Console users, by email, that the API keys they had saved in their workspaces may have been exposed. Not OpenCode's keys. Theirs: OpenAI, Anthropic, and Google keys, belonging …

  6. r/LocalLLaMA TIER_1 English(EN) · /u/chemist_slime ·

    Opencode breached, rotate keys to be safe.

    <!-- SC_OFF --><div class="md"><p>Details are developing…</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/chemist_slime"> /u/chemist_slime </a> <br /> <span><a href="https://x.com/opencode/status/2111516673953935833?s=46">[link]</a></span> &…

  7. Mastodon — mastodon.social TIER_1 English(EN) · spookyd ·

    Hackers breached OpenCode Console, an AI coding platform, stealing API keys from 1.4% of users and racking up hundreds—sometimes thousands—of dollars in unautho

    Hackers breached OpenCode Console, an AI coding platform, stealing API keys from 1.4% of users and racking up hundreds—sometimes thousands—of dollars in unauthorized charges. Worse: AI models the team used for defense kept refusing to analyze malicious code due to safety filters.…

    LINKS techcrunch.com/…/hackers-hit-ai-coding-to…
  8. Mastodon — mastodon.social TIER_1 English(EN) · clydara ·

    OpenCode disclosed on Oct 17 that an intruder reached a legacy system and provider API keys saved in OpenCode Console "may have been exposed" (1.4% of Console u

    OpenCode disclosed on Oct 17 that an intruder reached a legacy system and provider API keys saved in OpenCode Console "may have been exposed" (1.4% of Console users). The gap in the coverage: "distillation attack" is the company's wording, not an established motive, and 1.4% has …

    LINKS thehackernews.com/…/opencode-console-brea… thehackernews.com/…/open

RELATED ENTITIES

RELATED TOPICS