OpenCode Console incident

OpenCode’s public incident statement says a breach affected 1.4% of OpenCode Console users, specifically a subset with external providers linked. The company says it emailed affected users and was working with Anthropic, OpenAI and Google on remediation.

TechCrunch’s October 19 report describes unauthorized provider spending and attributes to co-founder Dax Raad the distinction between the hosted Console and the open-source application and command-line tool, which he says were not affected. The company calls the incident a distillation attack; the report notes that this motive remains disputed and that the initial intrusion method has not been disclosed.