// GeminiHIGH
OpenCode Console, a third-party platform for managing AI provider API keys, suffered a security breach on October 17, 2026, affecting 1.4% of users. Unauthorized access to a legacy system compromised Gemini and other provider API keys stored in workspaces. Attackers exploited a large-scale distillation attack. Users reported unauthorized charges on their accounts; OpenCode has notified affected users and is coordinating remediation with Gemini, OpenAI, Anthropic, and other providers.
- OpenCode Console Breach: Rotate Your AI API Keys Now (2026) - DE(opens in a new tab)
- OpenCode Security Breach Exposes User API Keys - ThreatCluster(opens in a new tab)
- OpenCode Security Breach Exposes Third-Party API Keys of its Con(opens in a new tab)
- OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and (opens in a new tab)
// Get alerts for Gemini