# CFOs Face $1M Cloud Bills from Stolen AI

> Hackers sell stolen AI access for $60/month, leaving companies with $1M cloud bills.
- Title: CFOs Face $1M Cloud Bills from Stolen AI · Pymnts | Shortify
- Summary: Hackers sell stolen AI access for $60/month, leaving companies with $1M cloud bills. Cybercriminals hijack enterprise AI credentials to generate $1 million…
- Keywords: llmjacking, ai fraud, cloud billing, google cloud, cfo, api keys, token costs, financial controls, Pymnts
- Source: Pymnts — https://pymnts.com/news/artificial-intelligence/2026/the-cfos-guide-to-llmjacking-when-stolen-ai-becomes-a-7-figure-cloud-bill
- Author: PYMNTS
- Published: 2026-11-04T21:38:26+00:00
- Read time: 1 min
- Topics: llmjacking, ai fraud, cloud billing, google cloud, cfo, api keys, token costs, financial controls, business, finance
## What is LLMjacking?
Cybercriminals hijack enterprise AI credentials to sell stolen access to large language models.

> The next million-dollar fraud could be a legitimate cloud bill
## Google Reports $1M Cloud Charges
Fraudulent ai consumption exceeded $100,000 in a single day with cumulative charges reaching $1 million.

> Google’s cyber team documented incidents in which fraudulent ai consumption exceeded $100,000 in a single day
## LLMjacking Targets Multiple Industries
Financial services, retail, technology and transportation companies across continents are affected.

> The attacks have affected financial services, retail, technology and transportation companies across multiple continents
## How LLMjacking Works
Attackers generate high-volume api calls using stolen credentials to create token costs for victims.

> One such service, jet night, advertised unlimited access to frontier models for approximately sixty dollars per month
## Jet Night Service Details
Jet Night sells unlimited access to premium ai models for $60/month with 500,000 api calls in eight hours.

> Google researchers linked the service to an attacker that generated more than 500,000 api calls in less than eight hours
## Why Traditional Controls Fail
Authentication does not equal financial authorization, exposing gaps in ai expense controls.

> Successful authentication does not establish that the business authorized the underlying expense
## CFOs Need New Controls
Firms must implement identity verification and know your customer automation within 12 months.

> The pymnts intelligence report found that 65% of firms plan to adopt or expand identity verification and know your customer automation within the next twelve months
## Key takeaway

Cybercriminals hijack enterprise AI credentials to generate $1 million in cloud charges within days, creating a new fraud category for CFOs.