logo

From $180 to $82,000 in 48 Hours: The Gemini API Key Leak Bankrupting Small Dev Teams

ID: 0384f51c-a268-5bde-bfd0-a96b9a9e5b85

STIX ID: report--0384f51c-a268-5bde-bfd0-a96b9a9e5b85

Feed Name: securityonline.info

Threat Score
30/100

Date Published: 2026-03-04

Date Updated: 2026-04-23

Author: Ddos

...
...

A three-person developer team accidentally exposed their Google Gemini API key, which was scraped and abused to run extensive requests that generated an $82,000 Google Cloud bill in 48 hours; Google declined full remediation citing the shared-responsibility model and the platform's lack of rigid financial quota protections, prompting criticism about insufficient anomaly detection and billing safeguards.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.