Cybersecuritynews Stolen Gemini API Key Leads to $82K in Unauthorized Charges
Article Content
Browse articles 
A three-person development team in Mexico faces financial ruin after a stolen Google Cloud API key resulted in $82,314.44 in unauthorized charges within 48 hours. The key was compromised between February 11 and 12, allowing attackers to exploit the 'Gemini 3 Pro Image' and 'Gemini 3 Pro Text' endpoints, leading to a staggering 455x increase in usage costs.
Ask AI about this cluster
Answers cite the sources they use
Updated 225d ago How this analysis works
Timeline
2026-02-11
Gemini API key compromised by attackers
2026-02-12
Unauthorized charges accumulate to $82,314.44
2026-03-03
News article published detailing the incident
2026-03-04
Additional articles published covering the event
More articles in this cluster (3)
Following this threat?
Track Chocolate Factory in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…