GoKawiilMETR discloses two 2025 security incidents involving stolen API key and exposed endpoint
METR, a nonprofit that evaluates risks in frontier AI models, revealed it suffered two cybersecurity incidents this year. In March, attackers stole an API key used for public-model inference and used it for weeks to run up a large number of credits, while in May attackers unsuccessfully probed an exposed endpoint attempting to reach internal data.
GoKawiil's interpretation of the reporting above, not reported fact.
METR's evaluations inform how AI labs and regulators assess the safety of frontier models, so any breach touching its infrastructure raises concerns about the integrity and confidentiality of that oversight work. The incidents underscore that even organizations tasked with policing AI risk are themselves attractive targets, and their response—hiring dedicated security staff and hardening infrastructure—signals how seriously such breaches are now treated across the AI safety ecosystem.
- METR disclosed a March API key theft and a May probing attempt on exposed infrastructure.
- The March breach allowed persistent unauthorized access for weeks before detection.
- METR responded by hiring security staff, retiring legacy systems, and tightening credential controls.
YubiKey 5 NFC Security Key — Stolen credentials and long-lived API keys are exactly the kind of gap a hardware security key helps close. The YubiKey 5 NFC plugs into USB-A or taps via NFC to add phishing-resistant two-factor authentication to accounts across cloud consoles, code repos and password managers. It's a pocket-sized upgrade for anyone tightening up their own security posture after reading about incidents like METR's.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Alexander Culafi, 2026-09-01
Published there as: “AI Model Evaluator METR Hit by Credential Theft, Probing”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.