Help deskLet’s talk
  1. News
  2. Alerts
  3. Warp · Data breach
AlertWarp · Data breach2 min read

Warp, a coding tool, says hackers got into AI activity logs

Warp, a popular AI coding tool, says attackers got into a vendor and exposed activity logs for some users. Here is who should worry and what is still unknown.

By the Dashline deskSource: BleepingComputer
Warp, a coding tool, says hackers got into AI activity logs
Photo: Derrick Coetzee from Berkeley, CA, USA, CC0
Act this week
What happenedAttackers broke into a third-party vendor in Warp's systems and exposed AI agent logs and usage data for some users.
Who is affectedWarp users, mainly developers and businesses using its AI coding environment, with about 1% estimated to be affected.
What to do
  1. 1Check your email for a notice from Warp saying you were affected.
  2. 2Watch your accounts and any connected services for activity you do not recognize.
  3. 3Be wary of unexpected emails or messages about Warp, and do not click links in them.
  4. 4If you use AI coding tools, review what passwords or keys may appear in your work and change any you worry about.

Warp, a popular tool developers use to work with AI coding helpers, says attackers broke into one of the vendors in its systems and exposed records of what its AI agents did, plus usage data. CEO Zach Lloyd estimates roughly 1% of users may be affected.

What happened

Warp started as a modern terminal, the text window developers use to give a computer commands. It now lets developers direct AI agents to write and test code and deploy software. The company says it has at least 800,000 users. Lloyd said Warp learned of the attack on a Friday and caught it within hours. The company says it has fixed the problem and limited the damage, and it has told the users it found affected.

What is not known

Warp has not said whether the exposed logs held source code, prompts, passwords or other sensitive details. It has not named the vendor or explained the flaw. The investigation is ongoing. CrowdStrike, a security firm, is helping, and law enforcement has been informed.

The risk is real because a similar case just happened. Last week, AI coding platform OpenCode said a breach exposed stored API keys, which are codes that let software use outside services. About 1.4% of its users were hit, and some faced unauthorized charges of up to $1,700.

Users who have not received a notice from Warp are less likely to be affected, but the investigation is not finished. The alert box above lists the steps to take.

The takeaway

If you use Warp or similar AI coding tools, watch for a notice and unusual activity, and treat any passwords or keys in your work as possibly exposed.

More articles

You should really read these.

Next step

Let’s talk

845 378 9733Montebello, New York
Terms of ServicePrivacy Policy©2026