Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts | TechCrunch

The short version

Hackers breached OpenCode's older system, compromising API keys for 1.4% of users, leading to unauthorized charges. Refunds underway as the company enhances security measures.

Key takeaways

• 1.4% of users affected by API key theft.
• Unauthorized charges reported, some over $1,000.
• OpenAI and others responded by blocking exposed keys.
• OpenCode implementing stronger security measures post-attack.

Overall sentiment

The article describes a significant security breach and its adverse effects on users.

AI classification of the article’s tone. Coverage is based on reported events and statements, with no direct verification.

Sources cited by the article

• OpenCode ↗
• wrote ↗
• Anthropic ↗
• OpenAI ↗
• South Korean banks ↗
• warned ↗
• AI ↗
• raised similar complaints ↗
• wrote on X ↗
• remains ongoing ↗
• said ↗
• I saw my Open AI, Anthropic, and Google AI spend alerts all fire off before going to bed wondering what was going on ↗
• skeptics ↗
• refunds ↗
• wrote ↗
• said ↗
• drawn ↗
• said ↗
• made ↗
• later revealed ↗
• Google ↗
• we may earn a small commission ↗
• TC ↗

These references were linked or listed by the publisher, then selected for relevance. They are distinct from our original-source citation.