← All reports

AI service providers failed to secure API keys, leading to unauthorized charges on users' accounts.

CybersecurityAIPrivacyOct 19, 2026score 0.272 posts · 0 replies across 2 instances
A breach of OpenCode's system exposed API keys from 1.4% of users, leading to unauthorized charges on their AI accounts. The breach highlights vulnerabilities in AI service providers' security and the potential financial impact on users. The incident has prompted responses from major AI companies like Anthropic and Google.

Claims

AI service providers failed to secure API keys, leading to unauthorized charges on users' accounts.
Parent: AIEntity: AI service providersImpact: negativeDate: Oct 19, 2026 - Oct 20, 2026Target: AI service providers' security measures
Exposure of API keys in a data breach can result in significant financial harm to users.
Parent: CybersecurityEntity: Data breachesSub-entity: API key exposureImpact: negativeDate: Oct 19, 2026 - Oct 20, 2026Target: Impact of API key exposure

Source posts

@[email protected]
OpenCode has disclosed that attackers breached an older system and stole API keys from 1.4% of Console users, then ran up unauthorised charges on victims' AI accounts. Some reported bills in the hundreds of dollars, one over $1,700. Anthropic and Google revoked the exposed keys; OpenAI is refunding. #CyberSecurity #OpenSource #AIAgents #DeveloperTools
0 boosts · 0 favs · 0 replies · Oct 19, 2026
#cybersecurity#opensource#aiagents#developertools
@[email protected]
OpenCode breach – AI keys targeted for model distillation An OpenCode Console breach potentially exposed OpenAI, Anthropic and Google API keys belonging to 1.4% of Console users, potentially letting attackers run up bills on victims' accounts. ... https://itnerd.blog/2026/10/20/opencode-breach-ai-keys-targeted-for-model-distillation/
0 boosts · 0 favs · 0 replies · Oct 20, 2026