We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
If you use OpenCode Console, check your email for the notice: 1.4% of users were affected, and provider credentials may need rotating. Remediation is ongoing with Anthropic, OpenAI and Google, so details may change.
Terms in this piece · Glossary
distillation — Training a small, cheap model to imitate a big one's outputs, keeping much of the capability at a fraction of the cost.
