In an Oct. 22nd email to RuntimeWire, Yuanlin Lin named OpenRouter, OpenAI, Anthropic and Gemini, and said Zeabur had notified all four. Zeabur's report separately describes a suspected use of a customer's OpenAI key; Railway's Oct. 22nd follow-up says investigators believe its attacker sought AI-provider keys for distillation.
By [Emerson Redding](https://runtimewire.com/author/emerson-redding)
· Published
· Updated
Primary source: [zeabur.com](https://zeabur.com/blogs/october-2026-security-incident)
Why it matters #
Lin's October-specific confirmation adds evidence that keys for four AI providers were involved. Zeabur's report had already named OpenAI and described possible use of a customer's key as a hypothesis; it did not establish which keys were exfiltrated or used.
In an Oct. 22nd email to RuntimeWire, Zeabur founder Yuanlin Lin confirmed that keys for OpenRouter, OpenAI, Anthropic and Gemini were involved in the company's October security incident. "The keys involved were for OpenRouter, OpenAI, Anthropic, and Gemini," Lin wrote. "We notified all four but have not received a response."…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.