Skip to content
Submit incident
AII-1000-78021
ReportedReported by fewer than three independent publishers, with no official finding.

Google Cloud Users Face Large Bills After AI API Key Compromise

Google Cloud users incurred substantial unexpected bills after their AI API keys were compromised, with some reporting losses of tens of thousands of dollars in hours. Users sought refunds for unauthorized API usage charges.

10 May 2026 · Google Cloud · Security and cyberattacks
10 May 2026

Drafted by Raidu Incident Detection, an automated system.

AII-1000-780212 sources ↓
Quick facts
Category
Security and cyberattacks
Country
United States
Source
TheRegister.com
Date
10 May 2026
Drafted by
Raidu Incident Detection

What happened

Google Cloud users experienced unauthorized charges after API keys were compromised, resulting in large unexpected bills.

Reported impact

Users reported significant financial losses from unauthorized API usage, with some losing $67,000 in hours.

Classification

Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Country
United States
Harm status
Actual harm
Intent
Unknown
Timing
Post-deployment
Harm types
Economic or property
Harmed
Consumers, Business
Failure modes
Data leak
AI systems
Google Cloud AI APIs

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

TheRegister.com
Google users fight for refunds as unauthorized API usage bills soar
12 May 2026
Cybernews
$67K lost in hours: legacy Google API keys causing massive expenses for developers
13 May 2026