Mercor Confirms Cyberattack Tied to LiteLLM Open-Source Compromise — Extortion Crew Claims Data Theft

TechCrunch·medium signal

AI recruiting startup Mercor confirmed a security incident after an extortion hacking crew took credit for stealing data from the company's systems. The attack is tied to the compromise of open-source LiteLLM project reported last week. This is the first named victim of the LiteLLM supply chain attack, which exposed credentials across 36% of cloud environments, and demonstrates how open-source dependency compromises cascade into real enterprise breaches.