Valued at $10 billion, AI data company Mercor confirms a major data breach involving clients such as OpenAI, Anthropic, and others.

DeepFlowTech · 2026-04-03T06:23:22+00:00

Startup Mercor confirms a major security breach, with hackers exploiting a supply chain attack on the open-source library LiteLLM, stealing up to 4TB of data, including source code and customer information. Mercor has taken measures to respond and has launched an investigation.

DeepFlowTech

2026-04-03 06:23:22

Abstract generation in progress

Deep Tide TechFlow message, April 03, according to Fortune, the startup Mercor, which provides training data to AI companies such as OpenAI, Anthropic, and Meta, has confirmed that it suffered a major security vulnerability. The incident stems from a supply chain attack targeting the open-source library LiteLLM, which is widely used by developers to connect to AI services, with daily downloads reaching millions of times.

The attack was launched by the hacker group TeamPCP, by implanting malicious code in LiteLLM to steal credentials. Another hacker group, Lapsus$, later claimed to have obtained up to 4TB of data from Mercor, including source code, database records, internal Slack communications, and platform chat video footage. According to unverified reports, some of Mercor’s customers’ datasets and information related to their confidential AI projects may have been leaked. Mercor said it has quickly taken measures to contain the situation and has launched a third-party forensic investigation.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.