// OpenaiHIGH
OpenCode, an open-source AI coding agent, disclosed a security breach on October 18, 2026 affecting approximately 1.4% of its users. Unauthorized access to a legacy system exposed API keys for OpenAI, Anthropic, Google, and other third-party AI providers stored in user workspaces. The company describes the incident as a large-scale distillation attack. Affected users are at risk of unauthorized API usage, billing fraud, and credential misuse for model extraction purposes.
- OpenCode Discloses Security Breach, Says Attackers May Have Acce(opens in a new tab)
- OpenCode API Key Breach: OpenAI, Anthropic Keys at Risk | The Cy(opens in a new tab)
- OpenCode Security Breach Exposes Third-Party API Keys of its Con(opens in a new tab)
- OpenCode breach may have exposed API keys for AI services(opens in a new tab)
- OpenCode Says Breach May Have Exposed Users’ AI Provider Keys | (opens in a new tab)
- OpenCode Console Breach Affects 1.4% of Users, May Have Exposed (opens in a new tab)
// Get alerts for Openai