OpenCode leak incident may affect OpenAI, Anthropic and Google

OpenCode confirmed that its Console service suffered unauthorized access, and third-party API keys for OpenAI, Anthropic, and Google stored in workspaces may have leaked. The company disclosed on October 17 the incident that occurred the previous night, saying it involved a legacy system being taken offline, and said it was related to a large-scale knowledge distillation attack, affecting 1.4% of Console users, who have been notified by email. Contributor Dax Raad said the affected service was Console rather than OpenCode itself. OpenCode has notified the three model providers; security company Safeguard recommends users check for usage and billing anomalies since October 16, generate new keys first and then revoke old keys, and simultaneously update references in CI/CD, environment files, and local Agent configurations.