The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
1 discrepancy flagged
  • ▲Editor-verified line by line against: OpenCode statement via BleepingComputer, The Hacker News, TechCrunch. Unverifiable claims stripped.
Sourcing
1source

via bleepingcomputer.com

bleepingcomputer.com · track record
2Stories
100%Verified
230d
All sources →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
Home/Tech/OpenCode Console breach may have exposed users' AI provider API keys
VERIFIEDBy Xavier Rivera·Monday, October 19, 2026 at 7:33 PM EDT·1.5 min read

OpenCode Console breach may have exposed users' AI provider API keys

OpenCode says a breach tied to a large-scale distillation attack affected 1.4% of OpenCode Console users who had linked external providers. Earliest possible key exposure was October 17 at 00:30 UTC, and some users report unauthorized API charges of up to $1,700.

Source:bleepingcomputer.com
Post
OpenCode Console breach may have exposed users' AI provider API keys
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
TL;DRAI · 60 sec read

OpenCode says a breach of a legacy Console system may have exposed the OpenAI, Anthropic or Google API keys saved by 1.4% of Console users. Affected users were told to revoke and replace those keys, and some report unauthorized charges.

OpenCode, the open-source AI coding agent, says a breach of its Console service may have exposed API keys that some users saved for external AI providers.

1.4% of OpenCode Console users were affected.
"We had a security breach last night related to a large-scale distillation attack that impacted 1.4% of OpenCode Console users," the project said on Saturday, October 17. "We have notified them all this morning via email. If you did not get an email, you were not impacted, it was a subset of users who had external providers linked." Those providers include OpenAI, Anthropic and Google.

The breach involved Console, not the local app.
Co-founder Dax Raad said the incident involved "the OpenCode Console, not OpenCode itself," according to The Hacker News. Keys added in the OpenCode command-line and desktop apps are stored on the user's machine. OpenCode's email said the earliest possible exposure was October 17, 2026, at 00:30 UTC, and told users to revoke and replace affected keys with each provider.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →

Some users report unauthorized charges.
Users reported charges ranging from several hundred dollars to as much as $1,700, BleepingComputer reported, and some said Google suspended their cloud projects over activity consistent with hijacked resources. OpenCode's message to affected users mentioned possible reimbursement.

OpenCode is working with OpenAI, Anthropic and Google.
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
Raad said attackers had been targeting OpenCode's systems for at least 48 hours using AI agents. OpenCode has not said how the legacy system was reached.
Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Morning Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning.

Two minutes, free forever. What's in The Brief →

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →
HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
More frombleepingcomputer.com
  • Researchers say hackers hijacked AOMEI update servers to spread malware

    Tech · 54m
More inTech
  • IBM Concert 1.0 through 3.0.0 hit by high-severity crypto flaw CVE-2026-6719

    Tech · 4h
  • IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 hit by stored XSS flaw

    Tech · 4h
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →

MORE IN THIS BEAT

All Tech →
  • Tech·Oct 19

    Researchers say hackers hijacked AOMEI update servers to spread malware

    Researchers from ManageEngine and Google say attackers tampered with AOMEI's update and notification configuration files in three short windows, delivering the CROSSROAD downloader and SHINYROAD backdoor through AOMEI Backupper. AOMEI says its CTO is leading an investigation.

  • Tech·Oct 19

    Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

    Rank Math says a limited number of users who downloaded Rank Math PRO 3.0.123 between October 15 at 20:02 UTC and October 16 at 07:12 UTC received files containing malware. The free WordPress.org version was not affected, and a clean 3.0.124 is available.

  • Tech·Oct 19

    OpenAI says its latest models are far better at COBOL, Fortran and Visual Basic

    OpenAI published two evaluations showing its latest models improve at building and migrating code in low-resource languages including COBOL, Fortran and Visual Basic. GPT-6 Astra averaged 87.4% on MultiLangBench, and GPT-6.1 Sol reached up to 97.9% on a COBOL migration test.

  • Tech·Oct 19

    Microsoft pulls out of Nscale's Essex AI data centre over grid delays

    Microsoft has terminated its agreement to anchor Nscale's Loughton, Essex data centre after power connection delays pushed the expected supply date into the 2030s. Microsoft said the decision relates to a single site, and Nscale said it remains committed to the project.

  • Tech·Oct 19

    This week in AWS: Lambda Web Functions, S3 on Vercel, and EC2 T8i

    AWS launched Lambda Web Functions, which run standard HTTP servers on Lambda without rewrites, and made Amazon S3 available on the Vercel Marketplace and v0. EC2 T8i instances also reached São Paulo.