OpenCode Breach Hits OpenAI, Anthropic, Google API Keys — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- OpenCode said an intruder reached a legacy system on the night of October 16, potentially exposing third-party AI provider API keys that users had saved in its Console hosted service.
- OpenCode Console, the company's optional hosted workspace, stores user-supplied keys for OpenAI, Anthropic, or Google — meaning a single breach at the niche dev platform cuts across all three major AI ecosystems at once.
Why it matters: Any developer who stored their OpenAI, Anthropic, or Google credentials in OpenCode Console faces potential unauthorized access and should treat those keys as compromised. The intrusion hit a legacy system rather than core infrastructure, but the blast radius still spans the three biggest commercial AI APIs simultaneously.
Ask SkimNews
