AI Data Company Mercor Confirms Major Breach

On April 3rd, AI data company Mercor, valued at $10 billion, confirmed a major data breach involving clients such as OpenAI and Anthropic. The incident stemmed from a supply chain attack on the open-source library LiteLLM, where the hacker group TeamPCP implanted malicious code to steal credentials. Lapsus$ claimed to have obtained 4TB of data, including source code, database records, and internal communications. Mercor has taken measures to contain the situation and initiated a third-party investigation.