IT Services Circle

Oct 19, 2026 · Information Security

OpenCode Breach: Hackers Steal API Keys to Train Models, Developers Lose Thousands

A security vulnerability in OpenCode exposed API keys for OpenAI, Anthropic, and Google Gemini, allowing hackers to run up massive bills — up to $1,700 per user — by using the stolen credentials to generate high-quality training data for their own models, prompting emergency revocations and warnings about third-party AI tool risks.