AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
· Source: supplychaindigital.com
In short
AI hiring startup Mercor confirmed it was one of thousands of companies affected by the LiteLLM supply-chain attack, with extortion crew Lapsus$ claiming to have stolen 4 TB of data including 939 GB of Mercor source code. The attack originated from TeamPCP compromising open source tools like Trivy and LiteLLM, with threat hunters estimating data exfiltration from 500,000 machines and over 1,000 impacted SaaS environments. Security experts warn that while Mercor is the first downstream company to publicly confirm being a victim, it won't be the last as the cascading effects of these supply chain attacks continue to spread.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 14, 2026: AI-Driven Execution Transforms Supply Chains with Speed, Security, and Scale
Tags: cybersecurity, supply-chain, AI, security, vulnerability, attacks