INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

OpenCode Console Breach May Have Exposed OpenAI and Google Keys

| 2026-10-19 06:07 HIGH HIGH DATA BREACH
JSON
Executive Summary
AI-generated
On October 16, an intruder reached a legacy system at OpenCode and may have exposed third-party AI provider keys saved in the company's Console service. The affected group consists of approximately 1.4% of Console users who had linked outside providers, with around 100 users impacted according to Dealroom reports. The breach involves "the OpenCode Console" itself, not OpenCode, as co-founder Dax Raad stated that keys never come to the company. The attack likely works by exploiting vulnerabilities in the legacy system or its interaction with third-party AI provider services like OpenAI and Anthropic. As of October 17, OpenCode has notified affected users via email to revoke their linked keys and replace them, while also working with these providers to fix the issue; however, some users have already reported unauthorized usage costs ranging from €200 to $1,700.
Technical Mitigations AI-generated
• Revoke the key in the provider's own dashboard and create a new one, following the instructions from OpenAI, Anthropic, or Google. • Update every application and script that used the old key to prevent unauthorized usage. • Set a spend limit or alert at the provider and give each tool its own key, so a copied key does less damage and its use is easier to trace.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA technologytechnology
Incident Timeline
‎October 16
An intruder reached a legacy system at OpenCode on the night of October 16.
tactic Data Breach
 Swati Khandelwal  Oct 19, 2026 Data Breach / Artificial Intelligence An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.
organisation Data Breach /
 Swati Khandelwal  Oct 19, 2026 Data Breach / Artificial Intelligence An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.
tactic T1588.007 - Artificial Intelligence
 Swati Khandelwal  Oct 19, 2026 Data Breach / Artificial Intelligence An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.
general_metric 19  Oct
 Swati Khandelwal  Oct 19, 2026 Data Breach / Artificial Intelligence An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.
‎October 17
Threat actors used a large-scale distillation attack to breach OpenCode Console, potentially exposing API keys for OpenAI, Anthropic, and Google.
‎October 18
Attackers were attempting to breach OpenCode's systems for 48 hours prior to October 18.
general_metric 48 past hours
Attackers were still trying to get into OpenCode's systems on October 18, Raad wrote on X: they had been "non stop trying to attack our systems for the past 48 hours," and "a side effect is everything is getting hardened."
‎Oct 19, 2026
Threat actors used the OpenCode Console to potentially expose API keys for OpenAI, Anthropic, and Google.
industry Technology
General Document Context
organisation OpenCode
Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without ever seeing the key.
organisation Google
Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without ever seeing the key.
organisation Colin Parsons
Dealroom reported that Colin Parsons wrote on X that his OpenAI key had been used for $281 and his Anthropic key for $168, and that Preston Zeller put his losses at $1,700.
organisation Notebookcheck
Notebookcheck reported a Reddit user's claim of $400 of unauthorized usage on an Anthropic account, and another's of about €200 of Google usage, with the project then suspended.
organisation API
Anthropic said in September that the labs behind such campaigns reach its models through networks of fake accounts created with stolen credit cards, login credentials and harvested API keys .
Intelligence Sources
The Hacker News 2026-10-19