BreachFeed
← All incidents
companyOpenCode
suspectedmediumData breachFirst reported Oct 18, 2026 · Disclosed Oct 17, 2026

OpenCode: breach exposed third-party API keys of some Console users

OpenCode disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with Anthropic, OpenAI, and Google to address it.

Members only

The full record: the timeline and 12 linked reports

  • Every update as it happened, with the status at each step
  • Every report behind the record, newest first
  • Alerts the moment OpenCode — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

OpenCode: breach exposed third-party API keys of some Console users · BreachFeed