Story
Stolen Gemini API key racks up $82,000 in 48 hours
1 report
1 website
1 discussion
Latest report
Overview
A stolen Google Cloud API key incurred $82,314 in charges for Gemini usage within 48 hours, while the typical monthly expenditure was only $180. Setting billing caps and alerts on cloud API keys is crucial to prevent significant financial losses from unauthorized usage.
Summary from llmhorrors.com.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · llmhorrors.com
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-03-03.
- Praise: Google's automatic locking of leaked API keys demonstrates a proactive approach to security, which is crucial for protecting users from unauthorized spending.
- Concern: The lack of hard spending limits on Google Cloud for API keys raises significant concerns, particularly for smaller projects relying on LLMs, making it a risky choice.
- Concern: Setting budgets on GCP is surprisingly non-trivial, which can deter developers from using Gemini API for their projects due to potential financial risks.