Attackers Steal METR API Key and Burn $600,000 in AI Credits

September 1, 2026 · 9:05 am 2 sources

Image: Infosecurity Magazine

Coverage

Coverage

• Attackers Steal METR API Key and Burn $600,000 in AI Credits
  Infosecurity Magazine · September 1, 2026 14:30
  Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000

More coverage

• Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
  The Hacker News · September 1, 2026 09:05
  METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered "two notable security incidents" where external…