Stolen Gemini API Key Leads to $82K in Unauthorized Charges

Stolen Gemini API Key Leads to $82K in Unauthorized Charges

First seen 4 Mar 2026, 15:11 UTC News.YcombinatorCybersecuritynewsTheregister 88% similarity 63.8

Article Content

Browse articles
ThreatCluster

A three-person development team in Mexico faces financial ruin after a stolen Google Cloud API key resulted in $82,314.44 in unauthorized charges within 48 hours. The key was compromised between February 11 and 12, allowing attackers to exploit the 'Gemini 3 Pro Image' and 'Gemini 3 Pro Text' endpoints, leading to a staggering 455x increase in usage costs.

ThreatCluster AI

Timeline

2026-02-11
Gemini API key compromised by attackers
2026-02-12
Unauthorized charges accumulate to $82,314.44
2026-03-03
News article published detailing the incident
2026-03-04
Additional articles published covering the event

Community

Browse all →