cloud-computing api-management billing-issues ai-safety

Google Cloud customer wakes up to $18,000 bill despite $7 budget

tomshardware.com

April 22, 2026

6 min read

🔥🔥🔥🔥🔥

49/100

Summary

A Google Cloud customer received an $18,000 bill after an attacker exploited a forgotten API key, making over 60,000 requests and exceeding a $1,400 spending cap. Safety measures for API keys are turned off by default, leading to the unexpected charges.

Key Takeaways

A Google Cloud customer received an unexpected bill of over $18,000 due to an attacker exploiting a forgotten API key, resulting in over 60,000 requests.
Google Cloud's safety features, which could have prevented the incident, were turned off by default.
The customer's account was automatically upgraded to a higher spending tier without notification, significantly increasing the billing cap during the attack.
Cybersecurity experts have raised concerns about the risks associated with Google Cloud's single API key format, especially with the activation of the Gemini API.

Read original article

View story →

Coverage & discussions

Hacker News · tomshardware.com

Google Cloud customer wakes up to $18,000 bill despite $7 budget ↗

Community discussions

Hacker News discussion ↗

Historical count: 5 · 5 saved in sample · Historical sample

Analysis ready

Community Sentiment

Negative

Positives

Switching to providers like Hezner, which offer hard billing limits, can protect consumers from unexpected charges, making cloud services more accessible and manageable.

Concerns

The lack of a feature to automatically shut down services at a billing cap exposes customers to significant financial risks, highlighting a major flaw in GCP's billing practices.
Google's billing practices are perceived as predatory, with users feeling that the company profits from unexpected charges without accountability.
The current cloud billing paradigm, which allows for indefinite charges, is criticized as being unsustainable and unfair for normal consumers and small businesses.