OpenCode disclosed an ongoing distillation attack affecting 1.4% of Console users with linked external AI providers.
Security & Exploits ·
OpenCode disclosed a security incident stemming from a large-scale distillation attack that affected 1.4% of Console users who had external AI providers connected to their accounts. The company notified impacted users by email, with unaffected users not receiving communication. The breach was isolated to the subset of users maintaining linked external provider integrations.
The incident remains active, preventing OpenCode from disclosing additional technical details at present. The company is coordinating with Anthropic, OpenAI, and Google on remediation efforts. What remains unclear is the nature of the data accessed during the attack, the timeline for full resolution, and whether the distillation technique succeeded in extracting model weights or other proprietary information from the linked providers.