Stolen AI API keys generated nearly $1M in charges for a single company

Mandiant investigated multiple 2026 "LLMJacking" incidents in which threat actors hijacked enterprise access to large language models across cloud and LLM providers, with fraudulent charges exceeding $100,000 USD in a single day at some organizations and cumulative charges reaching $1 million USD before access was revoked. The dominant initial access vector was exposed or stolen cloud identity tokens, including IAM credentials, service account keys, GitHub personal access tokens, and active session tokens, with actors also harvesting exposed LLM API keys from public GitHub repositories and validating them using minimal single-token requests. Google Threat Intelligence Group described a maturing ecosystem with a division of labor between actors establishing initial access and "LLM Mixers" such as jet-night.com and newapi[.]pro that proxy, aggregate, and resell unauthorized LLM access.