OpenCode Hacked: User credentials leaked

OpenCode announced a security breach that occurred the previous night, attributing it to a large-scale "distillation" attack that affected 1.4% of OpenCode Console users. The company said it has notified all impacted users by email and that the incident remains active, so it is withholding further technical details while working with Anthropic, OpenAI, and Google on remediation. The message frames the event as significant enough to involve multiple major AI providers, and emphasizes ongoing response efforts rather than a full disclosure of what was accessed or how the attack unfolded.

User reactions on the platform show immediate concern about potential credential or key exposure and financial impact: replies include questions about lost funds and speculation that API keys or other secrets were leaked. The post drew substantial attention and engagement, indicating heightened community alarm despite the relatively small percentage of affected users. The notice focuses on notification and remediation partnerships while leaving key specifics - such as exact data types compromised, attacker methods beyond "distillation," and timelines for containment - undisclosed pending further investigation.