Mercor says it was hit by cyberattack tied to compromise of open-source LiteLLM project

Mercor says it was hit by a cyberattack tied to a supply-chain compromise of the open-source LiteLLM project.

The LiteLLM compromise has been linked to hacking group TeamPCP; extortion group Lapsus$ says it targeted Mercor and accessed its data.

Founded in 2023, Mercor works with companies including OpenAI and Anthropic and contracts specialized domain experts to train AI models.

The company facilitates more than $2 million in daily payouts and was valued at $10 billion after a $350 million Series C led by Felicis Ventures in October 2025.

Mercor spokesperson Heidi Hagberg said the company moved quickly to contain and remediate the incident and is conducting a thorough investigation with leading third-party forensics experts.