CYBERSECURITYTRACKER
Permanent story citation

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10612

As cited

Copy frozen at (site build).

breaches incidents

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder accessed a legacy system at OpenCode on October 16, potentially exposing artificial intelligence (AI) provider application programming interface (API) keys that users stored in OpenCode Console. The hosted service allows teams to save OpenAI, Anthropic, or Google credentials for shared access to AI models without sharing keys directly.

Why it matters: Teams using OpenCode Console with stored API keys face immediate risk of unauthorized AI service access and billing fraud; check Console for stored credentials and rotate any exposed keys to providers.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder accessed a legacy system at OpenCode on October 16, potentially exposing artificial intelligence (AI) provider application programming interface (API) keys that users stored in OpenCode Console. The hosted service allows teams to save OpenAI, Anthropic, or Google credentials for shared access to AI models without sharing keys directly.

Why it matters: Teams using OpenCode Console with stored API keys face immediate risk of unauthorized AI service access and billing fraud; check Console for stored credentials and rotate any exposed keys to providers.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder accessed a legacy system at OpenCode on October 16, potentially exposing artificial intelligence (AI) provider application programming interface (API) keys that users stored in OpenCode Console. The hosted service allows teams to save OpenAI, Anthropic, or Google credentials for shared access to AI models without sharing keys directly.

Why it matters: Teams using OpenCode Console with stored API keys face immediate risk of unauthorized AI service access and billing fraud; check Console for stored credentials and rotate any exposed keys to providers.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary