Anthropic revokes Claude API keys after OpenCode breach hit 1.4% of users in distillation attack
lydiahallie · x · 2026-10-18
- OpenCode disclosed a security breach tied to a large-scale distillation attack affecting 1.4% of Console users — specifically those who had external provider accounts linked. All affected users were notified by email; Anthropic, OpenAI, and Google are involved in remediation, and the incident is ongoing.
- Anthropic engineer Lydia Hallie confirmed Anthropic revoked the Claude API keys believed to be affected, and advised anyone who saved a key in OpenCode to rotate it as a precaution.
More from Models
- OpenRSI Index: a benchmark for research agents doing recursive self-improvement — jiqizhixin · 2026-10-18
- Perplexity's decision model wins Catan tournament at under half a cent per game — denisyarats · 2026-10-18
- DeepSeek V4.1 Flash 1017 aces 10-task coding benchmark at under 5 cents per task — Fabulous_Pollution10 · 2026-10-18
- Scaling01 Slams DeepSeek's New Model as 'Can't Ship Good Models Anymore', Drama Ensues — teortaxesTex · 2026-10-18
- From 4K to 1M tokens: context windows grew 250x in four years since GPT-3.5 — khademinori · 2026-10-18
- Ollama rolls out updated model to DeepSeek-V4.1-Flash users — ollama · 2026-10-18