Alleged OpenRouter breach: 250k user records and 207k API keys up for sale
Kyrannio · x · 2026-10-26
- A threat actor on an underground forum claims to be selling a database tied to openrouter.ai: 251,996 user rows (250k unique users) and 207,847 sk-or-v1 format API keys (mix of active, revoked, expired).
- Claimed user fields include emails, usernames, password material (hashed, some plaintext claimed), names, signup dates, credits, plan and country; key fields include user linkage, key values, creation/last-used timestamps, spend and rate limits.
- The claim has not been independently verified; AI agent dev shawmakesmagic's reaction was a single horrified expletive.
More from Models
- Black Forest Labs open-sources 5.6B FLUX 3 Image Klein, +91 Elo with 38% fewer params — dl_weekly · 2026-10-26
- Gemma 4 26B-A4B runs offline on a 16 GB Mac: 33/40 on TypeScript tasks at 31 tok/s — Mission-Sir-1614 · 2026-10-26
- Claude safety classifier blocks SS7 attack analysis, dev pivots to abliterated GLM — l4rz · 2026-10-26
- Sakana AI to pretrain first domestic model Sakana Sawara for defense and cybersecurity by 2027 — tkasasagi · 2026-10-26
- 31M-param English TTS model phonon-31m-en trends on Hugging Face — gradium · 2026-10-26
- NVIDIA tutorial: post-training Nemotron for Europe with Persona datasets and LoRA — NVIDIA Developer · 2026-10-26