OpenCode Console, a hosted service for managing AI provider API keys, was breached on October 16, 2026, potentially exposing API keys for Google, OpenAI, and Anthropic stored by approximately 1.4% of users. The breach has been linked to a large-scale distillation attack. Affected users have been notified to revoke compromised keys immediately and replace them. Some users report unauthorized billing charges totaling hundreds of dollars. Attackers may continue attempting to access OpenCode systems.
// Get alerts for Google Workspace