tech
April 1, 2026
Mercor says it was hit by cyberattack tied to compromise of open-source LiteLLM project
The AI recruiting startup confirmed a security incident after an extortion hacking crew took credit for stealing data from the company's systems.
TL;DR
- AI recruiting startup Mercor confirmed a security incident.
- The incident is linked to a supply chain attack involving the open-source project LiteLLM.
- The hacking group Lapsus$ claimed responsibility for the breach and shared alleged stolen data.
- Mercor is conducting an investigation with third-party forensics experts.
- LiteLLM's project was compromised with malicious code discovered and removed, but its widespread use raises concerns.
- The extent of affected companies and data exposure from the LiteLLM incident remains unclear.
Continue reading the original article