---
title: "Data breach at OpenCode"
description: "On the night of 16 to 17 October 2026, OpenCode suffered unauthorised access to a legacy system that was being decommissioned. The company states that 1.4% of users of its OpenCode Console platform are affected, limited to those who had connected external AI providers. The API keys for those provide"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-opencode
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-17
dateModified: 2026-10-17
---
# OpenCode

Data breach — Low

On the night of 16 to 17 October 2026, OpenCode suffered unauthorised access to a legacy system that was being decommissioned. The company states that 1.4% of users of its OpenCode Console platform are affected, limited to those who had connected external AI providers. The API keys for those providers (including OpenAI, Anthropic or Google), stored in their workspaces, may have been exposed. Keys stored only locally in the OpenCode client are not mentioned in the alert.

An exposed API key lets a third party send requests to the provider's models in the key owner's name and at their expense.

| Fact | Value |
| --- | --- |
| Disclosed on | October 17, 2026 |
| Incident dated | October 17, 2026 |
| Sector | Digital services |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | Low |
| Status | Reported |

## Exposed data

- Other personal data

## What you can do

- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [OpenCode piraté : les clés API OpenAI, Anthropic et Google exposées](https://www.cyberattaque.org/cyberattaque-opencode-pirate-les-cles-api-openai-anthropic-et-google-exposees/) — Cyberattaque.org

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-opencode
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees