Mercor Becomes Latest Victim of LiteLLM Supply Chain Attack Affecting Thousands

Mercor, a $10 billion AI recruiting platform, has been compromised as part of a widespread supply chain attack targeting the popular open-source library LiteLLM, affecting thousands of companies globally. The incident was amplified when the notorious Lapsus$ hacking group claimed involvement and published stolen data samples, revealing potential unauthorized access to sensitive company records and customer interactions. This breach underscores the critical risk enterprises face when relying on third-party open-source components, particularly in the rapidly growing AI sector where security vulnerabilities can have far-reaching consequences.