{"rewrite":{"id":"r_6b80dedbb972d343d551af0d","clusterId":"c_3bfa6052b6a87470a25b4a8d","slug":"opencode-console-breach-may-have-leaked-users-ai-api-keys","model":"deepseek-v4-1-flash","headline":"OpenCode Console Breach May Have Leaked Users' AI API Keys","summary":"Anomaly Innovations, which runs the open-source AI coding tool OpenCode, confirmed unauthorized access to an old system on October 17, 2026. API keys for OpenAI, Anthropic and others stored in OpenCode Console workspaces may have leaked, and the company says 1.4% of Console users were affected. Some users report drained balances and unrecognized charges. Anthropic says it has invalidated affected Claude API keys.","whyItMatters":"A breach inside a coding agent's Console layer turns every stored provider key into a liability, and the defensive burden now falls on both users and the model providers.","webCardHtml":"\u003cp\u003eThe access hit an old system that Anomaly Innovations was already retiring. OpenCode Console is separate from the regular OpenCode app, and people who only use the app itself are not affected. Keys stored in Console workspaces, used to reach OpenAI, Anthropic and other services, are the exposure. Anthropic\u0026#39;s Lydia Hallie said the company has invalidated Claude API keys believed to be affected and is working with OpenCode. OpenCode developer Dax said attackers have kept attempting to hit the system for 48 hours and are running AI agents around the clock.\u003c/p\u003e","blueskyPost":"OpenCode says unauthorized access to an old system may have leaked API keys stored in OpenCode Console for 1.4% of Console users. Anthropic has invalidated affected Claude keys. Some users report drained OpenAI and Anthropic balances. Check your usage and reissue keys.","twitterPost":"OpenCode confirmed unauthorized access to a retiring system. API keys stored in OpenCode Console for 1.4% of Console users may have leaked. Anthropic invalidated affected Claude keys. Users report drained balances. Reissue your keys and check billing.","threadsPost":null,"newsletterBlurb":"Anomaly Innovations confirmed unauthorized access to an old OpenCode system, and API keys stored in OpenCode Console workspaces may have leaked. The company says 1.4% of Console users were affected and were notified by email. Anthropic has invalidated affected Claude API keys, and users are being asked to reissue keys and check usage history.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20261019-opencode-leak/\",\"title\":\"API keys may have leaked via AI programming tool 'OpenCode'; reports of OpenAI and Claude balances being drained by unauthorized use\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4631,"outputTokens":562,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1792401728,"createdAt":"2026-10-19T09:16:52.000Z","publishedAt":"2026-10-19T09:21:06.000Z","updatedAt":"2026-10-19T09:21:06.000Z"},"cluster":{"id":"c_3bfa6052b6a87470a25b4a8d","canonicalTitle":"AIプログラミングツール「OpenCode」でAPIキー流出の可能性、OpenAIやClaudeの利用残高が不正利用でゼロになったとの報告も","representativeArticleId":"a_4a45f642e0e2f88f5de43d74","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"OpenCode\"],\"studios\":[\"OpenAI\",\"Anthropic\"],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-19T05:03:00.000Z","lastSeenAt":"2026-10-19T05:03:00.000Z","updatedAt":"2026-10-19T09:21:06.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20261019-opencode-leak/","title":"AIプログラミングツール「OpenCode」でAPIキー流出の可能性、OpenAIやClaudeの利用残高が不正利用でゼロになったとの報告も"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["OpenCode"],"studios":["OpenAI","Anthropic"],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":null}