OpenCode says a break-in may have exposed saved AI keys
OpenCode says an intruder accessed an older internal system and may have seen saved account access codes used to connect OpenAI, Anthropic, and Google services through OpenCode Console. People and teams who stored these codes in the hosted Console service should treat them as possibly exposed and replace them.
Who is at risk
Anyone whose team saved OpenAI, Anthropic, or Google access codes in OpenCode Console is most at risk.
What to watch for
Watch for unexpected charges, unfamiliar activity in your AI service accounts, or tools behaving as if someone else is using your connected services.
What to do
Immediately replace any OpenAI, Anthropic, or Google access codes stored in OpenCode Console, remove old ones, and review recent account activity and billing for anything unfamiliar.