AI Recruiting Startup Mercor Hit in Massive LiteLLM Supply Chain Attack Affecting Thousands of Companies
AI recruiting startup Mercor confirms it was hit in a massive supply chain attack on open-source library LiteLLM, which sees millions of daily downloads, with extortion group Lapsus$ claiming responsibility and sharing allegedly stolen data including Slack conversations and contractor videos, while thousands of other companies may also be compromised.