OpenCode Console Breach: What You Need to Know

Last updated: October 18, 2026. This is a live page. We will update it as OpenCode and the AI providers publish more. TL;DR Are you affected? If you linked OpenAI, Anthropic or Google keys to OpenCode Console, treat them as exposed. OpenCode has emailed the users it identified, but no email does not clear you. Potential impact: someone holding your key can run models on your bill and, depending on the key’s scope, reach your files, stored prompts and fine-tuned models. Do this now: revoke and reissue those keys in each provider’s own dashboard, then review usage from October 16 onward. What happened OpenCode is an open-source AI coding agent built by Anomaly Innovations. OpenCode Console is its hosted service, where teams can store their own AI provider keys so the agent can use them. On October 17, 2026, OpenCode announced on X that it had suffered a security breach the night before, “related to a large scale distillation attack that impacted 1.4% of OpenCode Console users.” It said the affected users were a subset who had external providers linked. According to reporting on the notice email, the intrusion was in a legacy Console system OpenCode was in the process of retiring. OpenCode says the incident is ongoing, that it cannot share more details yet, and that it is working with Anthropic, OpenAI and Google to remediate. It has not yet said how the attackers got in, how the keys were stored, when access began, how many keys were used, or who is behind it. What you need to know If OpenCode emailed you, you are affected. OpenCode notified the users it identified on the morning of October 17. No email does not mean you are in the clear. OpenCode says users without an email were not impacted, but the incident is still ongoing. If you linked provider keys to Console, follow the steps below anyway. The exposed data is AI provider API keys. These are keys you linked to an OpenCode Console workspace, for OpenAI, Anthropic, Google or another provider. If you run OpenCode locally with your own keys, rotate them too. Nothing published shows those keys were exposed, but rotating takes minutes and closes the question. Misuse is not confirmed, but it is likely. OpenCode says it cannot yet confirm the keys were used. Some users report AI usage charges they did not authorise. What you need to do Find your exposure. Look for OpenCode Console accounts tied to corporate email addresses or company cards. Ask your developers whether any of them got the notice. Revoke and …