OpenCode says a security breach linked to a 'large scale distillation attack' hit 1.4% of OpenCode Console users on the night of 16–17 Oct; affected users, a subset with external providers, were emailed
OpenCode, the open-source AI coding agent, said on its official X account on 17 October 2026 (UTC) that it had a security breach the previous night, related to what it called a large-scale distillation attack, that affected 1.4% of OpenCode Console users. The company said it notified all affected users by email that morning, that users who did not get an email were not affected, and that the affected group was a subset of users who had external providers set up. An earlier version of the post said the incident was ongoing, so OpenCode could not share more details yet. OpenCode has not said what data, keys or accounts were accessed, how the attackers got in, or how many people 1.4% represents. No Australian impact has been reported. This card will be updated when OpenCode publishes a fuller notice.
- Product
- OpenCode Console (hosted console for the OpenCode AI coding agent)
- Versions
- n/a — incident (night of 16–17 Oct 2026; details pending)
- Exploited in Australia?
- unknown
- Patch to
- If you received OpenCode's breach email, follow its instructions. As a precaution, OpenCode Console users with external model providers connected should rotate those provider API keys, check provider usage and billing for unexpected activity since 16 October, and watch for phishing that mentions the incident.
Primary: OpenCode (official X account) — security breach affecting 1.4% of OpenCode Console users (17 Oct 2026) · Vendor: OpenCode · Hacker News — OpenCode reports security breach affecting 1.4% of Console users (17 Oct 2026)