Mercor says it was hit by cyberattack tied to compromise of open-source LiteLLM project

AI recruiting startup Mercor confirmed a security incident tied to a supply chain compromise of the open-source LiteLLM project, attributed to hacking group TeamPCP. Extortion group Lapsus$ claimed responsibility for the breach and shared sample data allegedly taken from Mercor. The incident highlights supply chain risk for AI companies that depend on widely-used open-source LLM tooling.