Hackers breach OpenCode and steal developers' AI provider keys

OpenCode said a security breach may have exposed stored OpenAI, Anthropic and Google keys for a subset of Console users. The company told affected developers to revoke and replace them after an overnight incident tied to a legacy system.

A bunch of developers woke up this morning to AI charges they never made. Somebody broke into OpenCode, a popular AI coding app, and grabbed the keys people use to pay for OpenAI, Claude and Google. The company says the whole thing was part of a large scale operation to copy the AI models themselves. The timing is what got me. Five days earlier, Anthropic put out a post saying it had cut the amount of data these copycats could pull out of Claude by 90 to 99%. Here's how the copying works, because everything else hinges on it. You hit a top model like Claude or GPT with millions of questions, save every answer and especially the step-by-step reasoning, and train your own cheaper model to imitate it. The industry calls it distillation. Back in February, Anthropic said DeepSeek, Moonshot…

Also per Dax they found the same solution as Hugging Face did, which was to actually get into the cyber defense programs that are explicitly designed for exactly this purpose.

Our team worked with OpenCode to have their users who are also OpenAI API customers back in business and any credits refunded which would have been drawn in the attack. Also, you can request Daybreak Blue access to use our cyber permissive setup for defense. Do not wait until you have to deal with an incident. We’re here to help.