On the night of 16–17 October 2026, an intruder reached a legacy OpenCode Console system that was being decommissioned, exposing the OpenAI, Anthropic, and Google API keys of 1.4% of the service’s users. Revoke and reissue those keys at each provider, then audit your billing since 16 October.
On October 12, 2026, Anthropic published a research post detailing three defenses against distillation: preserved thinking, a two-stage classifier, and mass account bans. Harvested data is claimed to have fallen by 90 to 99 percent, but the figures are vendor measurements, not an independent audit.
OpenAI says it neutralized a coordinated distillation campaign that extracted protected reasoning from its models, attributed to individuals associated with Moonshot AI. An August 2026 study shows the encrypted traces of Claude, Gemini, and GPT are interchangeable across sessions, enabling a scalable decryption jailbreak.
On September 8, 2026, a joint advisory from the NSA, FBI and CISA described “industrial-scale distillation” of American frontier AI models by DeepSeek, Alibaba, Moonshot AI and three other Chinese players, routed through a gray market of proxies called “transfer stations”. For model providers it is a countermeasure playbook; for enterprises it is one more due-diligence question about where their dependencies come from.
