Stolen AI access leaves companies with cloud bills of up to $1 million

Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in charges in a single day and up to $1 million in total, Google Threat Intelligence Group and Mandiant researchers have found. Mandiant responded to several such LLMjacking incidents in 2026, spanning financial services, retail, technology and other sectors.