OpenCode disclosed a security breach in a post on X (formerly Twitter), saying the incident occurred overnight and was related to what it described as a “large scale distillation attack.” According to the company, the breach impacted 1.4% of OpenCode Console users.
OpenCode said it notified all affected users via email on the morning following the incident. The company stated that the incident is still ongoing, and for that reason it is not sharing further details at this time.
OpenCode said it is working with Anthropic, OpenAI, and Google to remediate the issue, though it did not specify the nature of that collaboration or what role each company is playing in the response.
The statement does not define what is meant by a “distillation attack” in this context, nor does it specify what kind of user data — such as credentials, API keys, or usage data — may have been exposed. OpenCode also did not say how many total users are on its Console platform, making it unclear how many individuals were affected in absolute terms by the 1.4% figure it cited.
Because the incident is described as ongoing, OpenCode has not released a timeline for resolution or indicated when more information might be shared publicly. The company’s statement is limited to the single post, and no follow-up details, official incident report, or statements from Anthropic, OpenAI, or Google have been referenced.
Users of OpenCode Console who received a notification email from the company would be the ones directly affected, according to OpenCode’s statement. The company has not provided guidance in this post on what steps, if any, affected users should take, such as resetting credentials or monitoring for suspicious activity.
As with many early breach disclosures, the full scope and cause of the incident may not be clear until OpenCode or the involved companies release additional information. At this stage, the available facts are limited to what OpenCode has stated: the timing of the breach, the described attack type, the percentage of users affected, the notification process, and the involvement of three outside AI companies in the remediation effort.
Key facts
- OpenCode reported a security breach described as a “large scale distillation attack.”
- The breach affected 1.4% of OpenCode Console users, according to the company.
- Affected users were notified via email the morning after the incident.
- OpenCode said the incident is ongoing and did not share further details.
- OpenCode said it is working with Anthropic, OpenAI, and Google to remediate the issue.