GoKawiilOpenCode discloses breach affecting 1.4% of Console users
OpenCode said it suffered a security breach described as a large-scale distillation attack, which affected 1.4% of its Console users. The company notified affected users by email and says the incident is still ongoing, so further details are not yet available. OpenCode stated it is working with Anthropic, OpenAI, and Google to address the issue.
GoKawiil's interpretation of the reporting above, not reported fact.
The involvement of three major AI labs suggests the breach may touch on how OpenCode's platform interacts with underlying model providers, though the exact nature of the 'distillation attack' remains unclear. Until more details emerge, it's hard to assess whether user credentials, data, or model access were compromised, leaving affected users with limited information to judge their own exposure.
- OpenCode confirmed a breach impacting 1.4% of Console users
- Affected users were notified via email the same morning
- OpenCode is coordinating with Anthropic, OpenAI, and Google on remediation
YubiKey 5C NFC Security Key — In the wake of credential leaks like this, hardware-based two-factor authentication is one of the best defenses for your developer accounts. The YubiKey 5C NFC lets you secure logins to services like GitHub, Google, and cloud consoles so a leaked password alone can't compromise your account.a
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: twitter.com, 2026-10-17
Published there as: “OpenCode Hacked: User credentials leaked”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.