An OpenCode Console breach exposes OpenAI, Anthropic, and Google API keys for 1.4% of users

On the night of 16–17 October 2026, an intruder reached a legacy OpenCode Console system that was being decommissioned, exposing the OpenAI, Anthropic, and Google API keys of 1.4% of the service’s users. Revoke and reissue those keys at each provider, then audit your billing since 16 October.