Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

AI Model Evaluator METR Hit by Credential Theft, Probing

In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.