OpenCode says a breach tied to a distillation attack hit 1.4% of Console users

OpenCode, maker of the open-source coding agent of the same name, disclosed the breach on its X account on 17 October 2026. It said anyone who didn’t get its email wasn’t affected and that, with the incident ongoing, it couldn’t share more details. It linked the breach to a large-scale distillation attack, in which a model’s answers are used to train a copy without its maker’s permission, but hasn’t explained the connection.

In its email to affected users, seen in a screenshot of a Reddit post that security writer Matt Johansen shared on X, OpenCode said someone had gained unauthorised access to an old system it was in the process of retiring. Keys for outside providers saved in users’ workspaces, with OpenAI and Anthropic given as examples, may have been exposed. The email asked users to revoke and replace them through each provider’s dashboard, update any apps that use them and check recent usage for unexpected activity. The screenshot doesn’t show the sender’s address, and OpenCode hasn’t published the email.

Lydia Hallie, who works on Claude Code at Anthropic, said on X that Anthropic had revoked the Claude API keys it believes were affected. Replying to her, OpenCode’s Dax Raad said the breach concerns OpenCode Console, not the OpenCode agent, and that keys used in the agent never reach the company.

OpenCode hasn’t said how many users 1.4% represents, how the attacker got in or how many keys were exposed.