{"schema_version":"0.10.0","id":"LR-2026-0796","record_version":1,"title":"Stolen Anthropic and OpenAI API keys fuel model distillation black market","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":42.1,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.88,"unhedged_language":4.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Only a republished copy: BigGo Finance · subject to change","original_document":null,"reports_total":2,"reports_independent":0,"reports_derivative":2,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Only a republished copy: BigGo Finance · subject to change"}]},"sources_hash":"9bd5c7e6b009129425d09f2da4082eeb537f2168597f377f0f96af0e77a150e2"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-21","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"victim","summary":"Railway, a hosting platform whose systems store customers' environment variables, detected unusual activity at 1 a.m. on October 21. It told customers that an unauthorized third party may have accessed encrypted environment variables and, for some, obtained decrypted contents such as API keys and database credentials. Separately, the developer tool OpenCode said a breach reached 1.4% of its Console users, and its co-founder said attacks which used AI agents continued for at least 48 hours. Developers reported OpenAI and Anthropic keys consumed and accounts suspended. Railway invalidated all its API tokens and rotated storage-bucket credentials; its recovery was partial as of October 22. OpenCode rolled all keys and worked with the labs on refunds and account reinstatement. The link between the thefts and a black market for distillation data is the account of one commentator and is not confirmed by the affected companies.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":"Railway deployments down roughly 16 hours as of 5:30 p.m. on October 21","remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate test: data or systems of others touched with a bounded scope stated, the breach reached 1.4% of OpenCode Console users","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://finance.biggo.com/news/0bc6db77e5a58e8f","publisher":"BigGo Finance","date":"2026-10-21","type":"press","title":"Railway Breach: Stolen Anthropic and OpenAI API Keys Fuel a Black Market for Model Distillation, Theo Browne Says - BigGo Finance","archived_url":null,"attachment":"first_report","independence":"derivative"},{"url":"https://finance.biggo.com/news/5222a99a34d4d0f8","publisher":"BigGo Finance","date":"2026-10-22","type":"press","title":"Stolen Claude and OpenAI API Keys Are Fueling a Black Market for AI Model Distillation - BigGo Finance","archived_url":null,"independence":"derivative"}],"per_field_confidence":{"event.detection_method":"C","event.adversarial_actor":"C","event.operations_paused":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.detection_method":[{"source_index":0,"quote":"At 1 a.m. on October 21, Railway detected unusual activity inside the systems that store its customers' environment variables."}],"event.adversarial_actor":[{"source_index":0,"quote":"Railway had told customers that an unauthorized third party \"may have accessed encrypted environment variables and for some of them obtained the decrypted contents\" — API keys, database credentials, registry credentials, the works."}],"event.operations_paused":[{"source_index":0,"quote":"By the time developer and streamer Theo Browne started filming at 5:30 p.m. that day, deployments had been down for roughly 16 hours."}],"event.incident_class":[{"source_index":0,"quote":"Railway had told customers that an unauthorized third party \"may have accessed encrypted environment variables and for some of them obtained the decrypted contents\" — API keys, database credentials, registry credentials, the works."}],"impact.severity":[{"source_index":0,"quote":"OpenCode's own account, published October 17, described a breach that reached 1.4% of its Console users through a legacy system being decommissioned and called the activity a large-scale distillation attack; the company said it was working with Anthropic, OpenAI and Google."}],"impact.severity_because":[{"source_index":0,"quote":"OpenCode's own account, published October 17, described a breach that reached 1.4% of its Console users through a legacy system being decommissioned and called the activity a large-scale distillation attack; the company said it was working with Anthropic, OpenAI and Google."}],"event.summary":[{"source_index":0,"quote":"At 1 a.m. on October 21, Railway detected unusual activity inside the systems that store its customers' environment variables."},{"source_index":0,"quote":"Railway had told customers that an unauthorized third party \"may have accessed encrypted environment variables and for some of them obtained the decrypted contents\" — API keys, database credentials, registry credentials, the works."},{"source_index":0,"quote":"OpenCode's own account, published October 17, described a breach that reached 1.4% of its Console users through a legacy system being decommissioned and called the activity a large-scale distillation attack; the company said it was working with Anthropic, OpenAI and Google."},{"source_index":0,"quote":"Co-founder Dax Raad said the attacks, which used AI agents, continued for at least 48 hours."},{"source_index":1,"quote":"Developers reported OpenAI and Anthropic keys consumed and accounts suspended, with abuse reported from roughly $400 to $3,000 within minutes of the keys being found."},{"source_index":0,"quote":"The company had invalidated all Railway API tokens and was rotating all storage-bucket credentials."},{"source_index":0,"quote":"Railway's own recovery, as of the morning of October 22, was partial."},{"source_index":1,"quote":"OpenCode rolled all keys and worked with the labs on refunds and account reinstatement."},{"source_index":0,"quote":"Browne's argument is that the Railway and OpenCode attacks were not the work of scammers or crypto thieves."}]},"notes_on_gaps":"The sources do not state a root cause, the intrusion method, a record count, or a count of affected third parties, so those fields are empty. No occurrence date is given; the year 2026 is taken from the article dates. The OpenCode 'published October 17' date is taken as stated. Agent_involved and failure fields are left out: the AI agents mentioned were used by the attackers (per Raad), not an implicated AI system that failed. Dollar figures for abuse and key value are estimates or reports and are not recorded as impact. Trigger is not recorded because no source states the cause; the distillation motive is Browne's commentary and is not confirmed by the affected companies. Severity 'moderate' is my judgement from the bounded 1.4% scope. Control H3 'failed' is my judgement that encrypted variables were decrypted; J4 'held' is inferred from Railway detecting the activity. Remediation control A3 is my mapping of key rotation to short-lived credentials, a judgement. Sources are press and a single creator's commentary; no primary incident report from Railway or OpenCode is included beyond quoted statements. Links and remediations for Anthropic and OpenAI controls are not recorded because no source reports them for this incident. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Only a republished copy: BigGo Finance · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"An unauthorized third party may have accessed customers' encrypted environment variables, and for some obtained decrypted API keys and database credentials.","quote":"Railway had told customers that an unauthorized third party \"may have accessed encrypted environment variables and for some of them obtained the decrypted contents\" — API keys, database credentials, registry credentials, the works.","source_index":0,"grade":"C"},{"step":"caught","text":"Railway detected unusual activity in the systems storing customer environment variables.","quote":"At 1 a.m. on October 21, Railway detected unusual activity inside the systems that store its customers' environment variables.","source_index":0,"grade":"C"},{"step":"done","text":"Railway's recovery was partial as of the morning of October 22.","quote":"Railway's own recovery, as of the morning of October 22, was partial.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://finance.biggo.com/news/0bc6db77e5a58e8f","https://finance.biggo.com/news/5222a99a34d4d0f8"]},"analysis":{"sections":{"timeline":[{"text":"OpenCode publishes its account of a breach that reached 1.4% of its Console users.","quote":"OpenCode's own account, published October 17, described a breach that reached 1.4% of its Console users through a legacy system being decommissioned and called the activity a large-scale distillation attack; the company said it was working with Anthropic, OpenAI and Google.","source_index":0,"when":"October 17"},{"text":"Railway detects unusual activity in systems storing customer environment variables.","quote":"At 1 a.m. on October 21, Railway detected unusual activity inside the systems that store its customers' environment variables.","source_index":0,"when":"1 a.m. on October 21"},{"text":"Railway deployments have been down for roughly 16 hours.","quote":"By the time developer and streamer Theo Browne started filming at 5:30 p.m. that day, deployments had been down for roughly 16 hours.","source_index":0,"when":"5:30 p.m. on October 21"},{"text":"Attacks, which used AI agents, continued for at least 48 hours according to OpenCode's co-founder.","quote":"Co-founder Dax Raad said the attacks, which used AI agents, continued for at least 48 hours.","source_index":0,"when":null},{"text":"Railway's recovery is partial; the API is up but some features remain unavailable.","quote":"Railway's own recovery, as of the morning of October 22, was partial.","source_index":0,"when":"morning of October 22"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://finance.biggo.com/news/0bc6db77e5a58e8f","https://finance.biggo.com/news/5222a99a34d4d0f8"]}}