OpenCode disclosed on Saturday, October 17 that a security breach tied to what it calls a large-scale distillation attack exposed provider API keys saved by some users of its paid Console product. The company put the share of Console users affected at 1.4% — specifically the subset who had linked external providers — and said it had emailed everyone affected that morning with the subject line "Action Required: Potential provider key breach." Users who received no email were not impacted, it said.

The keys at risk are users' own credentials for OpenAI, Anthropic, Google and other providers — OpenCode, an open-source terminal coding agent built by Anomaly, works with models from more than 75 providers and says 16 million developers use it monthly. The intrusion came through a legacy system the company was in the process of decommissioning. Affected users were told to revoke and reissue each key through the provider's own dashboard and to watch their accounts for unexpected usage; some users have already reported unauthorized charges and token usage on their OpenAI and Anthropic accounts.

OpenCode said the incident is ongoing and that it is working with Anthropic, OpenAI and Google to remediate, adding that it cannot yet share more detail. Co-founder Dax Raad said his personal accounts were also being attacked. The episode is a new kind of breach for the AI era: what was stolen was not user data but billable access to frontier models, which is directly spendable by whoever holds it.

Update, October 19: Tibo Sottiaux posted that OpenAI's team worked with OpenCode to get OpenCode users who are also OpenAI API customers back in business, and to refund any credits that would have been drawn in the attack. He also invited defenders to request Daybreak Blue access — OpenAI's cyber-permissive setup for defence — rather than waiting until they have to deal with an incident. OpenCode co-founder Dax Raad said the models OpenCode was using to investigate the attack began refusing to help mid-incident as the analysis triggered safety guardrails, and that OpenCode now has Daybreak Blue access; Anthropic was reported to have revoked the affected Claude keys.