OpenCode says a security breach linked to a 'large scale distillation attack' hit 1.4% of OpenCode Console users on the night of 16–17 Oct; affected users, a subset with external providers, were emailed; OpenCode's email to affected users says linked provider API keys were exposed from 17 Oct 00:30 UTC, and users report unauthorised charges of up to about US$1,700
OpenCode, the open-source AI coding agent, said on its official X account on 17 October 2026 (UTC) that it had a security breach the previous night, related to what it called a large-scale distillation attack, that affected 1.4% of OpenCode Console users.
The company said it notified all affected users by email that morning, that users who did not get an email were not affected, and that the affected group was a subset of users who had external providers set up.
An earlier version of the post said the incident was ongoing, so OpenCode could not share more details yet. OpenCode has not said how the attackers got in or how many people 1.4% represents.
No Australian impact has been reported.
UPDATE 19 October 2026 (BleepingComputer, 19 Oct): OpenCode's email to affected users says the external-provider API keys they had linked to OpenCode Console were exposed, with the earliest possible exposure at 00:30 UTC on 17 October (8:30 am Perth), and that no other data appears to have been exposed.
Co-founder Dax Raad said attackers using AI agents had targeted OpenCode's systems for at least 48 hours. Affected users reported unauthorised API charges ranging from several hundred US dollars to about US$1,700 overnight, and some said Google suspended their Google Cloud projects for 'abusive activity consistent with hijacked resources'.
OpenCode says it is working with Google, OpenAI and Anthropic, and its email raises the possibility of reimbursement.
Correction (22 Oct 2026): removed an unconfirmed claim about OpenAI key revocation and refunds that rested only on a third-party forum post.
- Product
- OpenCode Console (hosted console for the OpenCode AI coding agent)
- Versions
- n/a — incident (night of 16–17 Oct 2026; linked provider API keys exposed from 17 Oct 2026 00:30 UTC)
- Exploited in Australia?
- unknown
- Patch to
- If you received OpenCode's breach email, follow its instructions. As a precaution, OpenCode Console users with external model providers connected should rotate those provider API keys, check provider usage and billing for unexpected activity since 16 October, and watch for phishing that mentions the incident. Since 19 Oct reporting: revoke and reissue any Anthropic, OpenAI or Google keys that were linked to OpenCode Console (do not wait for the provider), review usage and billing from 17 Oct 00:30 UTC onward, and if you were charged or your provider account or Google Cloud project was suspended, contact the provider and OpenCode about reinstatement and refunds.