OpenCode reports distillation attack breach affecting 1.4% of Console users
Overview
OpenCode says a large-scale distillation attack breached its Console overnight and affected 1.4% of its Console users.
Only users who had linked external providers were impacted, according to the company, and it emailed affected users on the morning of October 17, 2026. OpenCode says the incident is ongoing, so it cannot share more details, and it is working with Anthropic, OpenAI, and Google to remediate.
A Testing Catalog post repeats the company's account that the attack drained balances for affected users. The same post argues that smaller providers are less safe and that frontier-lab tokens are now more valuable, but that is the author's view, not a reported finding. No independent confirmation of OpenCode's claims has been reported.
Written by AI from the articles below · updated Oct 17, 3:44 PM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
🚨 AI News | TestingCatalog@testingcatalogXOpenCode says 1.4% of console users were hit by a distillation attackAIOpenCode says a large-scale distillation attack drained balances for 1.4% of its Console users, who were notified by email. The company is working with OpenAI, Anthropic and Google on remediation, and the incident is ongoing. The post's author argues the attack shows smaller providers are less safe and that frontier-lab tokens are now more valuable.

OpenCode@opencodeOfficialOpenCode reports a distillation attack that affected 1.4% of Console usersAIOpenCode says a large-scale distillation attack last night affected 1.4% of its Console users. It notified affected users by email, and only those who had linked external providers were impacted. The incident is ongoing, and OpenCode is working with Anthropic, OpenAI, and Google to remediate it.
OpenCode@opencodeOfficialOpenCode reports security breach from distillation attack affecting 1.4% of usersAIOpenCode says a large-scale distillation attack last night breached its Console and affected 1.4% of users. It has notified all affected users by email this morning and is working with Anthropic, OpenAI, and Google to remediate. The incident is ongoing, so the company says it cannot share more details.
Heat trend
Not enough continuous observations to show a trend yet.