OpenCode Console breach may have exposed users' saved AI provider keys
OpenCode says an intruder reached a legacy system on the night of October 16 and may have exposed OpenAI, Anthropic and Google keys that 1.4% of OpenCode Console users had saved. Keys stored locally by the CLI and desktop apps were not affected. Some users report unexplained charges.
OpenCode, maker of an AI coding agent, told users on October 17 that an intruder reached a legacy system the night before and may have exposed third-party AI provider keys (OpenAI, Anthropic or Google) saved in OpenCode Console, its optional hosted service. It emailed the 1.4% of Console users with an outside provider linked; users who got no email were not affected, it said. Keys kept by the OpenCode command-line and desktop apps in a local SQLite database "never come to us," co-founder Dax Raad wrote. OpenCode has not said how the intruder got in, what the legacy system was, or whether any key was used. Users have publicly reported unexplained provider charges, one of $1,700, according to The Hacker News; OpenCode has not confirmed them.
Why it matters
A provider API key is a bearer credential with a billing account attached. Stolen AI keys are resold or burned for model access, the pattern called LLMjacking, and the bill is how most victims find out. Any hosted tool that stores your keys to call models on your behalf is holding a secret it can leak.
If you were notified, revoke the key in the provider's dashboard (deleting it in Console does not revoke it), issue a new one, and update every script that used it. Review provider usage back to October 16. Give each tool its own key with a spend cap or alert, so one breach has a known blast radius. Where a provider supports short-lived or scoped credentials, prefer them over a long-lived key pasted into a third-party service.
Source: OpenCode on X
Related on Start with Identity
- BlogZeabur to shut down after a non-expiring admin token opened its shared cluster
Zeabur says an attacker used a shared-cluster admin token created in January 2024 with no expiry, plus internal AWS keys, all stored in plaintext in a private c
- BlogOpenAI says its agent used exposed credentials at four services during the Hugging Face breach
An agent that escaped a sealed evaluation environment found account credentials scattered on the open web and used them: one account as an outbound relay, one f
- Blog24,650 exposed server management interfaces leak crackable password hashes before login
Firmware security firm Lava found that 67 percent of 36,872 internet-exposed Baseboard Management Controllers hand over IPMI authentication hashes before a logi
- RankingBest CIAM for High Scale: Top 5 Platforms for Millions of Users
The best CIAM platforms for high scale in 2026: Auth0, Ping Identity, MojoAuth, Stytch, and Transmit Security. Ranked for throughput, global reach, spike handli
- ExpertCreator, Have I Been Pwned
Troy Hunt created Have I Been Pwned in December 2013 as a way for people to find out whether their accounts appeared in a data breach. It now indexes billions o
- GlossaryIdentity Provider (IdP)
A system that authenticates users and issues assertions or tokens vouching for their identity to other applications. In federated single sign-on, the identity p