Skip to content
Old Google API Keys Expose Sensitive Data via Gemini Access

Old Google API Keys Expose Sensitive Data via Gemini Access

First seen 26 Feb 2026, 14:14 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

Old Google API keys, previously deemed harmless, now pose a security risk as they can access sensitive data through the Gemini API. Security researchers found that nearly 3,000 keys, originally used for public services, can authenticate to Gemini, allowing potential attackers to access private data. This shift in functionality has raised alarms among developers and security experts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

Timeline

2026-02-25
Discovery of API keys' new access capabilities reported
2026-02-26
Cybernews article published on the risk of old API keys

More articles in this cluster (12)

Following this threat?

Track Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed