OpenCode Says Legacy-System Breach May Have Exposed Users’ AI Provider Keys
Summary
OpenCode says an intruder reached a legacy system, potentially exposing provider keys saved in Console for 1.4% of users. The company urged affected users to revoke and replace keys; copying or use has not been confirmed.
Key points
- OpenCode said an intruder reached a legacy system on October 16; the company described the incident as ongoing on October 17.
- The potentially exposed keys were OpenAI, Anthropic, or Google credentials saved in OpenCode Console, affecting 1.4% of Console users with an outside provider linked.
- OpenCode emailed affected users to revoke their keys with the providers and replace them. Deleting a key from Console does not revoke it.
- Users reported unauthorized charges, including claims of $281 and $168 in usage, $1,700 in losses, and other charges. These are user reports, not independently confirmed by OpenCode.
- OpenCode has not said that any key was copied or used, how the legacy system was accessed, or how many keys were involved.
- The company linked the incident to a large-scale distillation attack but has not explained the connection or named an actor.
- OpenCode co-founder Dax Raad said attackers continued trying to access the company's systems on October 18 and that systems were being hardened.
Article Details
- Victim Organization
- OpenCode
- Incident Type
- Intrusion into a legacy OpenCode system, potentially exposing third-party AI provider API keys saved in OpenCode Console.
- Incident Date
- 2026-10-16
- Disclosure Date
- 2026-10-17
- Data Types Exposed
- OpenAI API keys
- Anthropic API keys
- Google API keys
- Affected Records
- OpenCode said 1.4% of Console users with an outside provider linked were affected; it did not disclose a user count or the number of keys involved. Exposure is possible, not confirmed.
- Operational Impact
- OpenCode described the incident as ongoing and said it was working with Anthropic, OpenAI, and Google to address it. Dax Raad said attackers continued trying to access OpenCode's systems on October 18. Some users separately reported unauthorized provider usage and resulting charges; OpenCode has not confirmed that any key was copied or used.
- Ransom Or Extortion
- None reported.
- Claim Status
- alleged
People
Colin ParsonsUser reported by Dealroom as saying his OpenAI and Anthropic keys incurred unauthorized usage.Dax RaadOpenCode co-founder who described the affected service and said attackers continued trying to access the company's systems.Preston ZellerUser reported as putting his losses from unauthorized usage at $1,700.
Vendors
AnthropicConsole is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without ever seeing theGoogleConsole is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without ever seeing theOpenAIConsole is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without ever seeing the
Products
OpenCodeAn intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.OpenCode ConsoleAn intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.