Cybersecurity AI Research4 min reading time

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

The Hacker NewsPublished Sep 1, 2026

METR, a non-profit AI research group, suffered two cyberattacks in 2026, including theft of an API key that led to unauthorized use of AI credits worth about $600,000. The breaches exploited a vulnerability in a publicly accessible agent dashboard but no sensitive data was accessed.

#ai-research-organizations #api-security #cyber-attack-methods #metr

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

More in Cybersecurity

Cybercrime ring busted over AI-powered data theft targeting hospitals, businesses

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity