Back Mlq.Ai

AI Recruiting Platform Mercor Targeted in Supply Chain Cyberattack via Compromised ...

Mlq.Ai • April 1, 2026

Mercor, an AI recruiting startup valued at $10 billion, has confirmed a significant security breach traced to malicious code injected into the widely-used open-source LiteLLM project. The incident represents a substantial supply chain attack affecting thousands of companies globally that rely on the compromised library.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mercor Cyberattack Linked to LiteLLM Supply Chain Compromise AI recruiting startup Mercor confirmed it was impacted by a supply chain attack linked to the LiteLLM project, which has affected thousands of organizations. The breach was attributed to the hacking group TeamPCP, with extortion group Lapsus$ claiming to have stolen approximately 4TB of data, including 939GB of source code and sensitive user information. Initial access was reportedly gained through a compromised Tailscale VPN credential. The incident highlights the risks associated with open-source software dependencies, as LiteLLM is widely used across the AI ecosystem. Mercor has initiated a thorough investigation with third-party forensics experts to assess the full extent of the breach. The attack raises significant privacy and regulatory concerns under GDPR and CCPA due to the nature of the exfiltrated data. As investigations continue, the implications for affected organizations remain serious. 30 sources 71

Extracted Entities

AI Recruiting Platform Mercor Targeted in Supply Chain Cyberattack via Compromised ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Tools (1)