OpenCode discloses distillation attack that hit 1.4% of Console users

OpenCode, the open-source AI coding platform, has disclosed a large-scale security breach tied to what it calls a distillation attack. The incident affected about 1.4% of its Console users who had linked external AI provider accounts. The attackers were not after passwords or credit card numbers. They wanted access to some of the most expensive AI models on the market, and they found a way to make OpenCode users pay for it. What happened inside OpenCode’s Console OpenCode made the breach public on October 17, 2026. According to the company, attackers exploited vulnerabilities in a legacy system to gain unauthorized access to API keys stored in user workspaces. Those keys were connected to models from Anthropic, OpenAI, and Google. With the keys in hand, the attackers ran repeated queries against high-end AI models. Affected users reported their account balances draining quickly, with some bills climbing into the hundreds of dollars. OpenCode says it is working with Anthropic, OpenAI, and Google on remediation. The company is advising users to secure their credentials by rotating or revoking their API keys. Why attackers want model outputs The term “distillation” describes a techniq...