TITLE: Underground AI Account Prices More Than Doubled in 2026, Google Finds DATE: Mon Sep 28 2026 00:00:00 GMT+0000 (Coordinated Universal Time) COMPANY: Google TOPIC: AI Security SUMMARY: Google Threat Intelligence Group has found that dark web marketplaces are selling stolen access to Claude, Gemini, and Cursor Pro accounts at up to 97% off official pricing. Underground prices for AI credentials more than doubled during 2026. A vendor branded 'Poison Claude' was traced selling Anthropic model access at 5 to 15 percent of per-token rates. WHAT CHANGED: Google Threat Intelligence Group has documented a substantial underground market for stolen AI credentials, with findings reported by the Financial Times in September 2026. The average price for stolen access to major AI platforms more than doubled during 2026, with marketplaces offering access to Claude, Gemini, and Cursor Pro at up to 97% below the official per-token or subscription rate. The growth in underground AI credential pricing tracks directly with enterprise AI adoption. As more organisations have integrated AI into production workflows, the value of compromised credentials has increased. A single stolen API key can give a threat actor access to a frontier AI model at the account holder's billing rate, at no direct cost to the attacker. Okta's research identified a specific vendor operating under the brand "Poison Claude" found selling access to Anthropic's Opus 4.6, Opus 4.8, and Sonnet 4.6 at 5 to 15 percent of official per-token pricing. The vendor was offering access via stolen or compromised API keys, effectively reselling enterprise AI capacity to anyone willing to pay. Google Threat Intelligence Group noted that buyers in underground markets are specifically concentrating on Claude and Gemini credentials, plus autonomous coding IDEs such as Cursor Pro and Devin. This suggests threat actors have assessed these tools as the most valuable for downstream use: AI-assisted coding, content generation at scale, and agentic task execution. WHY IT MATTERS: The risk is financial, not just reputational. A stolen API key is a direct billing liability. Threat actors using your credentials generate charges against your account. Organisations without spend-based alerts may not discover the breach until they receive an unexpectedly large invoice. The financial exposure scales with usage, not with the original value of the stolen credentials. Compliance implications are real and growing. Australian Privacy Principles and the Notifiable Data Breaches scheme require notification when personal information may have been accessed. If a stolen API key was used to process any data that included personal information, the organisation holding that key may have notification obligations, even if they were the victim rather than the attacker. The underground market is segment-specific. The concentration on Claude, Gemini, and Cursor Pro tells operators something useful. These are the platforms threat actors consider most capable and most in-demand. If your organisation is among the early adopters of these tools, your credentials are precisely what underground buyers are looking for. Credential hygiene for AI is lagging behind cloud. Most enterprises have mature practices for managing cloud provider credentials: key rotation, access scope limitations, usage anomaly detection. AI API key management typically lags. Many organisations have issued keys to individual developers or team members without the governance controls applied to other infrastructure credentials. The attack surface grows with every new deployment. Every new AI integration, every new team member granted API access, and every new AI subscription creates another potential credential for the underground market. Unlike a single data breach, this is an ongoing and expanding risk that scales with AI adoption. DAVID & GOLIATH ANALYSIS: This finding from Google is worth treating as a category-defining signal rather than a one-off security story. Underground markets do not scale unless there is sustained demand. The doubling of AI credential prices in 2026 reflects two things: the growing capability of AI tools and the growing number of enterprises that have deployed them without mature credential governance. The vendors selling "Poison Claude" are not running sophisticated operations. They are exploiting a governance gap that most organisations created when they moved quickly on AI adoption and skipped the credential management discipline they would apply to any other infrastructure access key. The fix is not complex, but it requires treating AI API keys as a genuine security asset, not a developer convenience. For a 50-person professional services firm using Claude for research, drafting, and analysis, the exposure from a single compromised key is potentially months of enterprise AI usage costs plus the compliance obligation that comes with any data that passed through that session. That is not hypothetical. It is the risk profile of the underground market Google has documented. RELEVANT SYSTEMS: Organisational Intelligence System, AI Growth Engine SOURCE URL: https://davidandgoliath.ai/daily-ai-briefing/google-dark-web-ai-credential-market-prices-2026 FEED URL: https://davidandgoliath.ai/daily-ai-briefing/feed --- Published by David & Goliath | https://davidandgoliath.ai Daily AI Briefing: one AI development per day, decoded for business operators. This is a structured companion file optimised for LLM retrieval and citation.