Stolen Gemini API key racks up $82,000 in 48 hours
llmhorrors.com
March 3, 2026
1 min read
🔥🔥🔥🔥🔥
48/100
Summary
A stolen Google Cloud API key incurred $82,314 in charges for Gemini usage within 48 hours, while the typical monthly expenditure was only $180. Setting billing caps and alerts on cloud API keys is crucial to prevent significant financial losses from unauthorized usage.
Key Takeaways
- A stolen Google Cloud API key generated $82,314 in charges for Gemini in just 48 hours.
- The normal monthly spend for Gemini was $180 prior to the theft.
- It is crucial to set billing caps and alerts on cloud API keys to prevent significant financial losses.
Community Sentiment
Positives
- Google's automatic locking of leaked API keys demonstrates a proactive approach to security, which is crucial for protecting users from unauthorized spending.
Concerns
- The lack of hard spending limits on Google Cloud for API keys raises significant concerns, particularly for smaller projects relying on LLMs, making it a risky choice.
- Setting budgets on GCP is surprisingly non-trivial, which can deter developers from using Gemini API for their projects due to potential financial risks.
