# LLMjacking can drive enterprise AI costs into the five‑figures daily

> Criminals stealing AI API keys can add $46,000‑$100,000+ per day to a company's bill; experts advise tighter key management and monitoring.

Oossa · 2026-09-29 · https://oossa.com/en/llmjacking-can-drive-enterprise-ai-costs-into-the-five-figures-daily

LLMjacking – the illegal use of another company’s AI resources – is surging in 2026.  Hackers grab API keys or passwords and run large‑language‑model calls on the victim’s account, often at a fraction of the normal price.  For big enterprises, the extra usage can cost $46,000 a day and sometimes over $100,000, according to Sysdig’s threat team.  Security analysts say most breaches come from phishing, mis‑configured services, or insider leaks.  To stop it, firms should train staff, audit credentials, apply least‑privilege access, and rotate any exposed keys immediately.

## The facts

- Sysdig estimates LLMjacking can add $46,000‑$100,000+ per day to a bill
- Google Threat Intelligence chief John Hultquist reported a major rise in LLMjacking throughout 2026

## Why it matters

Unchecked AI credential theft can quickly blow up operating costs and expose sensitive data, hurting a company’s bottom line and security posture.

## Sources & references

1. [LLMjacking can run up your business’ AI bill fast – how to stop it](https://www.zdnet.com/innovation/llmjacking-business-ai-bill-cost-how-to-stop/) – ZDNet, 2026-09-29

Last updated: 2026-09-29