Search

threats

OpenCode Console breach may have exposed saved AI provider keys

OpenCode says a security breach on the night of 16 to 17 October 2026 hit 1.4% of OpenCode Console users, a subset with external providers linked. Provider keys saved in a workspace may have been exposed. Affected users were emailed on 17 October. The incident is ongoing. Revoke and reissue linked keys at each provider and check usage.