CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

September 1, 2026

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Ravie LakshmananSep 01, 2026Cyber Attack / Artificial Intelligence METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered "two notable security incidents" where external actors attempted to gain unauthorized access to its systems. No sensitive information is believed to have been accessed as a result of these incidents, it said, adding that a version of its findings was shared with AI companies it works with prior to public disclosure. The attacks have not been attributed to any known threat actor or group, nor did…