OpenAI Restores API Access After Breach Hits 1.4% of OpenCode Console Users

OpenAI restored API access for customers affected by an OpenCode Console breach that reached 1.4% of Console users and prompted refunds for unauthorized charges.

By Oct. 17, OpenCode had emailed affected users. They were a subset of Console users who had connected accounts with outside AI providers. The hosted service stores provider credentials and routes model requests through a gateway; the providers bill customers for that usage.

The incident was limited to Console, which lets teams share access to connected AI models. OpenCode’s open-source coding app and command-line tool were unaffected.

Refunds for unauthorized charges were underway by Oct. 17. OpenAI restored access for affected OpenCode users of its API on Oct. 19 and plans to refund credits consumed during the attack.