Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

METR disclosed two incidents: in March an exposed API key on a publicly accessible researcher EC2 instance (caused by a fail-open bug) was harvested and used over three weeks to consume roughly $600K in public-model credits, and in May a sustained probing campaign used agents and automated techniques against public infrastructure while a bug in a public transcript viewer risked exposing unpublished evaluation data; METR reported no evidence of sensitive data access, investigated with partners, patched the issues, and improved isolation and security controls.