OpenCode and OpenAI issue refunds after security breach of OpenCode console

1 points by indy ↗ HN
Just got this email from OpenCode security:

We're following up on your OpenAI credentials that may have been exposed. We've worked with OpenAI to revoke all of them and they have issued refunds for any unauthorized usage.

Additionally, if your account was banned as part of this process it should be reinstated.

No need to reply to this email unless you still have some issues

Thank you and apologies once again

2 comments

[ 2.8 ms ] story [ 9.8 ms ] thread
Wow, OK, so if you leak your api key, you're not liable for the cost? Nice. I can see no way to abuse this what do ever.
I'm pretty sure their timeline for the intrusion is not quite honest. I started getting strange phone calls about a month or so ago trying to recover an account and the leaked two pieces of information to me in that attempt. These pretty much tie it to opencode.