AIDEFEND SecureFlow / SecureFlow Case Index

Model Distillation Campaigns Target Google AI Services

• Copilot & SaaS
• AI Infrastructure
• Model Theft & Capability Extraction

Google reported campaigns that used compromised credentials, fraudulent accounts and proxies to collect model outputs for distillation: training another model from a provider’s responses. A February 2026 reasoning-focused campaign exceeded 100,000 prompts; later campaigns included some above 100 million. Those are campaign query volumes, not model weights stolen or a measured replication success rate. Google says it disrupted accounts and reduced the usefulness of collected outputs.