OpenCode Console Breach Exposes AI Provider API Keys in Distillation-Linked Attack
OpenCode disclosed a breach affecting its cloud-based Console after attackers accessed a legacy system, potentially exposing AI provider API keys belonging to approximately 1.4% of Console users. The company linked the incident to a large-scale model distillation attack and is working with OpenAI, Anthropic, and Google to revoke compromised credentials and address unauthorized charges.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/opencode-console-breach-exposes-ai-provider-api-keys-after-legacy-system-compromise-c-6-0-f-4/gD2P6Ple2L
BeyondMachinesOpenCode Console Breach Exposes AI Provider API Keys in Distillation-Linked AttackOpenCode disclosed a breach affecting its cloud-based Console after attackers accessed a legacy system, potentially exposing AI provider API keys belonging to approximately 1.4% of Console users. The company linked the incident to a large-scale model distillation attack and is working with OpenAI, Anthropic, and Google to revoke compromised credentials and address unauthorized charges.