OpenCode Breach Exposed AI Provider Keys for 1.4% of Console Users

AI coding platform OpenCode has disclosed a security breach that may have exposed third-party model credentials belonging to 1.4% of its Console users.

The company said an attacker accessed a legacy system on October 16. The potentially exposed data included API keys customers stored for services from OpenAI, Anthropic and Google. OpenCode notified affected users the following day and advised them to revoke and replace their credentials.

Some affected customers reported unauthorized AI usage charges ranging from hundreds of dollars to more than $1,000, according to reporting cited in the disclosure materials. OpenCode characterized the activity as a large-scale model distillation attack but has not publicly detailed the intrusion method.

The incident highlights the concentration of risk inside AI development platforms. A single tool may hold credentials for several model providers, allowing a compromise to create access and billing exposure across multiple external services.

"When a single AI developer tool holds API keys for OpenAI, Anthropic, and Google, breaking into that tool gives an attacker immediate billing access against three of the largest frontier model providers at once," said Seemant Sehgal, founder and CEO of BreachLock.

Security teams should use separate keys for individual projects, apply provider-level spending limits and monitor for unexpected model usage. Keys stored in a compromised service should be treated as exposed even if unauthorized charges have not appeared.

Organizations should also review which developer platforms can access production secrets. AI coding tools now occupy the same trust boundary as other privileged development and deployment systems.