OpenCode: breach from ‘a large scale distillation attack’ hit 1.4% of Console users
OpenCode @opencodeX
Why it matters
First-hand breach notice (~903k views) for stolen provider API keys, framed as a distillation attack.
Summary
OpenCode says a breach related to a large-scale distillation attack affected 1.4% of OpenCode Console users (those with linked external providers), who were emailed; the incident is ongoing and OpenCode is working with Anthropic, OpenAI and Google. 902,586 views and 6,889 likes when read via fxtwitter on 2026-10-18.
Archived text
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate