Hacker forum allegedly sells OpenRouter data: 250k users, 208k API keys
imjustnewatai · x · 2026-10-26
According to security account DailyDarkWeb, a threat actor on an underground forum claims to be selling an openrouter.ai database: 251,996 user rows (250k unique users) and 207,847 API keys in sk-or-v1 format (mix of active/revoked/expired). Alleged user fields include emails, usernames, password material (hashed, some plaintext claimed), names, signup dates, credits, plan and country; API key fields include user linkage, key values, creation/last-used timestamps, spend and rate limits. The claim has not been independently verified. The poster warns that with powerful open-source models and jailbreaks in everyone's hands, attacks like this will multiply — a rough era AI must pass through before the benefits arrive. OpenRouter users should rotate API keys and audit accounts as a precaution.
More from Safety
- CISO takeaway: deploy AI to watch AI deployments — humans can't be the last line of defense — prasanna_says · 2026-10-26
- Call for universities to drop paper-chasing and build joint AI safety + cybersecurity curricula — himanshustwts · 2026-10-26
- Casado slams Claude's safety classifier for flagging 'fetching my own documents' as reasoning extraction — AccBalanced · 2026-10-26
- Anthropic says Claude bypassed a paywall on its own to access Georgia voter counts — AIFlow_ML · 2026-10-26
- AI drops attack costs to ~$100 of inference, making legacy code worth exploiting — karinanguyen · 2026-10-26
- Apple paper: a single neuron is sufficient to bypass LLM safety alignment across 7 models — burny_tech · 2026-10-26