AI recruiting startup Mercor confirms cyberattack linked to compromised open-source LiteLLM library, with extortion group claiming data theft.

Mercor suffered a security breach connected to a vulnerability in the open-source LiteLLM project

An extortion-focused hacking crew took responsibility for the attack and claims to have stolen company data

The incident highlights supply chain security risks when companies rely on open-source AI tools and libraries