OpenCode Console breach hit 1.4% of users

What OpenCode said

In a post on X, the company said a breach had happened the previous night and impacted 1.4% of Console users. They were notified by email that morning; users who got no email were not affected. All affected users had external providers linked. The incident was still ongoing, so OpenCode shared no details, but said it was working with Anthropic, OpenAI and Google to remediate (TSN).

What the Console is

OpenCode itself is a free, open-source agent for the terminal, IDE and desktop (OpenCode). The Console is a separate, optional online service for teams. Per its documentation, teams can connect provider accounts they already pay for, such as Anthropic or OpenAI, by entering an API key; the Console stores the credential and serves models through its gateway. OpenCode has not said what the attackers accessed or whether any keys were exposed.

What a distillation attack is

Distillation trains a smaller model on the outputs of a larger one. Done without permission, it is an attack. In an October 12 write-up, Anthropic described such campaigns as often running through networks of fraudulent accounts spread across several providers. OpenCode has not explained how this relates to its breach.

What to do

If you received a notice, the safe move is to revoke and reissue every linked provider key in each provider's dashboard, then review recent usage for unusual activity. That is our suggestion, not official OpenCode guidance. The broader lesson: an API key stored in a third-party gateway is as much an attack surface as one committed to a public repo. Give each such service its own key with a spending cap.