When a breach gets framed around a trendy new attack class, ask what actually leaked and how.

OpenCode, an AI coding agent, disclosed that stored external-provider API keys (Anthropic, OpenAI, Google) were exposed for 1.4% of Console users. The disclosure ties this to a large-scale distillation attack, run partly by AI agents, over at least 48 hours. Victims reported up to $1,700 in unauthorized charges, and at least some saw Google Cloud projects suspended over hijacked resources.

Two stories sewn together

Distillation attacks are a real thing. You hammer a model with queries, harvest the outputs, and use them to train a cheaper imitation. That's an abuse-of-service problem, and it's been discussed for a while.

Leaked API keys are the oldest story in the book. Stored credentials got out. That's it. That's the incident.

The summary says plainly that the root cause and the exact mechanism of the key exposure remain undisclosed. So the credential theft may be a completely conventional breach.…