cloud-computing api-security cost-management ai-services

Stolen Gemini API key racks up $82,000 in 48 hours

llmhorrors.com

March 3, 2026

1 min read

🔥🔥🔥🔥🔥

48/100

Summary

A stolen Google Cloud API key incurred $82,314 in charges for Gemini usage within 48 hours, while the typical monthly expenditure was only $180. Setting billing caps and alerts on cloud API keys is crucial to prevent significant financial losses from unauthorized usage.

Key Takeaways

A stolen Google Cloud API key generated $82,314 in charges for Gemini in just 48 hours.
The normal monthly spend for Gemini was $180 prior to the theft.
It is crucial to set billing caps and alerts on cloud API keys to prevent significant financial losses.

Read original article

View story →

Coverage & discussions

Hacker News · llmhorrors.com

Stolen Gemini API key racks up $82,000 in 48 hours ↗

Community discussions

Hacker News discussion ↗

Historical count: 5 · 5 saved in sample · Historical sample

Analysis ready

Community Sentiment

Negative

Positives

Google's automatic locking of leaked API keys demonstrates a proactive approach to security, which is crucial for protecting users from unauthorized spending.

Concerns

The lack of hard spending limits on Google Cloud for API keys raises significant concerns, particularly for smaller projects relying on LLMs, making it a risky choice.
Setting budgets on GCP is surprisingly non-trivial, which can deter developers from using Gemini API for their projects due to potential financial risks.