OpenCode reports security breach affecting 1.4% of Console users

OpenCode disclosed a security breach tied to a large-scale distillation attack that affected 1.4% of OpenCode Console users, specifically a subset of users who had external providers linked. OpenCode said it emailed all affected users on the morning of the disclosure and that users who received no email were not impacted. OpenCode said the incident is ongoing and it cannot share more details, and that it is working with Anthropic, OpenAI, and Google to remediate.

We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate