{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreihq4w2g4jikbrh5pt3p6m7av5foc4jk5zu2ekv3sbrv3ztwvbbxqe",
    "uri": "at://did:plc:lk3jfj3zq4k4wxnk474axylu/app.bsky.feed.post/3mocdp3c3lz22"
  },
  "path": "/t/pro-account-and-company-organization-both-banned-for-distillation-compromised-api-key-one-week-no-human-reply/1383741#post_1",
  "publishedAt": "2026-06-15T00:58:28.000Z",
  "site": "https://community.openai.com",
  "tags": [
    "@OpenAI_Support"
  ],
  "textContent": "I am hoping someone from the team can help, as I have not had a human response in a week.\n\nBoth my paid Pro account and my company organization account were deactivated at the same time, flagged under the Distillation policy. We are a long-established travel business and use the API only for normal operational work, including heavy daily use of Codex for internal development. We do not train models and have no capability to do so.\n\nWe believe an API key was compromised and used by a third party. There was a sharp, isolated spike of unauthorized API charges within a single short window on Friday 5 June, far outside our normal low and steady usage. We have since traced and closed the likely leak on our side and secured all keys.\n\nI have already gone through the AI-assisted support chat and provided everything requested: the exact date and time window of the unauthorized charges, the amounts, and the card and billing details. The matter was escalated to a specialist with a reply promised “in the coming days,” but a week has now passed with no human response.\n\nCase IDs:\n\n  * Company account ban: C-2H0mjowksg1Z\n  * Personal account ban: C-WFrErL03zzM2\n\n\n\nCould a member of the team please:\n\n  * Pull both cases and arrange a manual human review rather than another automated closure\n  * Confirm why my personal account was also banned when the compromise was on the company API key, and review both together since they appear linked\n  * Disable the compromised key on your end, as I am locked out and cannot do this myself\n\n\n\nThis has brought a significant part of our operations to a halt, and we rely on Codex daily. I fully respect the need for platform security and enforcement. I believe this is a false positive caused by a stolen key, and I am ready to provide any further verification needed through the proper private channel.\n\n@OpenAI_Support — both case IDs are above (C-2H0mjowksg1Z and C-WFrErL03zzM2). Would you be able to take a look and escalate for a human review?",
  "title": "Pro account and company organization both banned for \"Distillation\" — compromised API key, one week no human reply"
}