OpenCode said on X on October 17 that it had a security breach the night before, "related to a large scale distillation attack that impacted 1.4% of OpenCode Console users." It said everyone affected was notified by email that morning, that users who did not get an email were not affected, and that only a subset of users who had linked external providers were hit. It said it was working with Anthropic, OpenAI and Google to remediate.
Security firm Cyera, summarizing the incident, says OpenCode's email to affected users tied the intrusion to a legacy console system the company was in the process of retiring. OpenCode has not said how attackers got in or how the keys were stored, and Cyera reports it can't yet confirm whether exposed keys were misused. Some users report usage charges they didn't make.
OpenCode Console is the hosted layer where teams share models from a workspace, set budgets and connect their own provider keys. Cyera points out that Console budgets only cover spend that runs through OpenCode, so they don't limit a stolen key used directly against the provider.