Overview
- OpenCode says an intruder accessed a legacy Console system on the night of October 16 and that it emailed the subset of users it says were affected on October 17, calling the incident related to a large‑scale distillation attack and estimating 1.4% of Console users may be impacted.
- Console stores workspaces’ third‑party API keys so teams can call models without seeing raw credentials, but those keys are bearer tokens that can be used for billable requests until a provider revokes them.
- Several users reported unauthorized provider usage and charges after the breach, with published claims ranging from a few hundred dollars to roughly $1,700 and at least one report of Google suspending projects for abusive activity.
- OpenCode says it is coordinating with OpenAI, Anthropic and Google, recommends affected users revoke and replace exposed keys, audit provider usage and update any systems that used old keys, and warns that deleting a key from Console does not revoke it at the provider.
- Security firms and reporting note distillation attacks run large volumes of model queries to train rival models and advise scoped replacement keys, provider spending limits and billing reviews as immediate steps to limit further financial and account abuse.