Breaches and incidentsBriefReported by a reputable outlet, citing the company
Mercor: AI data-contracting firm breached via the LiteLLM / TeamPCP supply-chain attack
Mercor confirmed a security incident and told Fortune it was “one of thousands of companies” affected by the LiteLLM supply-chain attack.
- Disclosed
What happened
- Mercor confirmed a security incident and told Fortune it was “one of thousands of companies” affected by the LiteLLM supply-chain attack. What data was accessed has not been disclosed by Mercor. Lapsus$ claimed hundreds of gigabytes, including Slack and ticketing data; Mercor did not confirm a connection.
- Root cause: the poisoned LiteLLM PyPI release (TeamPCP campaign; see catalogue section 2.2).
- TeamPCP is linked to the LiteLLM compromise by researchers; Lapsus$ claimed the data.
- Investigating with outside forensics; Meta reportedly paused work with Mercor (WIRED via secondary) and contractor lawsuits were reported.
Sources
- https://therecord.media/mercor-confirms-security-incident-tied-to-litellm
- https://fortune.com/2026/04/02/mercor-ai-startup-security-incident-10-billion/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.