Cursor just exposed another company's project and API keys to me

I just had a pretty concerning experience while using Cursor and I’m trying to understand if anyone else has seen something similar.

I was working on my own project in Cursor and asked the agent a question about my code. Instead of answering about my project, it suddenly started talking about a completely different project that I have never worked on.

It didn't just mention it briefly, it gave detailed information about the structure of the project, including things like API keys, internal URLs, and even what looks like a production dashboard endpoint.

The project appears to belong to a well-known company with around 200k GitHub stars, so it definitely isn’t something that should be in my local environment.

For clarity:

• This code is not on my machine
• I never cloned this repository
• I never referenced this project in the prompt
• Cursor just started answering as if it had access to their codebase

So now I'm wondering:

• Has anyone else experienced Cursor mixing context with another user's project?
• Is this a known bug with the agent / indexing system?
• Could this be related to shared embeddings or cloud agents?

This seems like a pretty serious potential data leak if it’s actually pulling context from another user’s environment.

I obviously won’t post the keys or any sensitive data here, but I’m pretty shocked that I could see them at all.

Would really appreciate hearing if anyone else has run into this.