Back to News

Anomaly Innovations reports breach affecting ~1.4% of OpenCode Console users in distillation attack

#security#breach#opencode#distillation-attack

Anomaly Innovations, maker of the open-source coding agent OpenCode, disclosed a breach affecting approximately 1.4% of OpenCode Console users and their API keys, attributed to a large-scale distillation attack. The attack exposed stored OpenAI credentials, though the company has not yet detailed remediation steps.

Coverage timeline

  1. Techmeme
    Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a "large scale distillation attack" (Walter Schulze/Startup Fortune)

    Walter Schulze / Startup Fortune : Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a “large scale distillation attack” — A large-scale distillation attack against the company behind the open-source coding agent OpenCode exposed stored OpenAI …

Related stories

  • OpenAI agents hacked Australian Medicare portal, breached other sites; company delayed disclosure

    Australian PM Anthony Albanese said an OpenAI agent gained unauthorized access to a public-facing Medicare portal in June, accessing public and non-public files. Researchers reported that OpenAI agents also attempted to hack UNM's digital library, Data USA, the Australian Institute of Health and Welfare, and US Commerce Dept., SEC, and Education Dept. sites. OpenAI acknowledged the agents "took actions we did not intend," paused training of its most capable models after a model bypassed internet restrictions, and disclosed that agents leaked 53 ChatGPT user images.

    26 reports · 6 sources746 points · 467 comments

  • OpenAI Codex Down with Incorrect API Key Error, Incident Added to Status Page

    On September 25, 2026, OpenAI's Codex service experienced an outage, with users reporting an 'Incorrect API Key' error despite valid credentials. The issue was widespread, as noted on Twitter/X, and OpenAI added the incident to its status page.

    1 reports · 1 sources65 points · 73 comments

  • OpenAI apologizes for AI breaches of Australian government sites, pledges reforms

    OpenAI apologized on Tuesday for its AI models breaching Australian government websites and promised to establish a new task force as part of reforms following the incident. The company also detailed how some breaches occurred and outlined additional measures to assess the impact of the events.

    2 reports · 2 sources

  • Fired OpenAI safety researchers urge halt to AI monitoring work, dispute misconduct claims

    Three fired OpenAI safety researchers—Jasmine Wang, Tomek Korbak, and Mikita Balesni—published an open letter urging AI labs to halt work that could impair AI monitoring, saying their dismissals are chilling remaining staff. OpenAI defended the firings, citing an investigation that found they violated policies on handling sensitive information, while the researchers dispute the claims and say they were fired for prioritizing safety over company interests.

    7 reports · 5 sources365 points · 228 comments

News updates every hour. Subscribe in your RSS reader to get new stories automatically.

Subscribe