OpenCode Says Breach May Have Exposed Users’ AI Provider Keys

OpenCode disclosed that an unauthorized party accessed an older system connected to its Console cloud service, potentially exposing API keys for OpenAI, Anthropic and Google used by developers. OpenCode said 1.4% of Console users were affected and that it emailed everyone in that group. The company said users who received no notice were not affected. It linked the breach to a large-scale distillation attack. Console is an optional cloud gateway that lets teams store their own AI provider keys in a workspace so members can use those services without seeing the credentials.

Source: TokenPost