DevelopingSafety
OpenCode Console breach hit 1.4% of users; Anthropic and Google blocked exposed keys
TechCrunch reports attackers broke into an older OpenCode system that stores API keys for Console users, affecting 1.4% of them. Some saw unauthorized charges of hundreds of dollars, a few over $1,000. The CLI and app were not affected. Anthropic and Google blocked exposed keys, OpenAI is refunding credits, and OpenCode is refunding users. Revoke Console keys at each provider.
- HEAT
- OUTLETS
- 6
- NEW IN 6H
- +1
- FIRST SEEN
- LAST SIGNAL
Made the five · #3 on Sunday, October 18, 2026
OpenCode breach puts stored OpenAI and Anthropic keys at risk
Primary source
TechCrunchtechcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/Coverage · 6 articles, oldest first
Saturday, October 17, 2026
Sunday, October 18, 2026
Cyber Security News
cybersecuritynews.com/opencode-security-breach/
Monday, October 19, 2026