METR API Key Compromised, Resulting in ~$600,000 in Unauthorized AI Credit Usage
A significant security incident has come to light involving the theft of an API key from METR, an organization focused on AI evaluation and benchmarking. According to reports, attackers successfully exfiltrated the credential and used it to access AI platform services, ultimately consuming approximately $600,000 worth of computational credits.