The 40-Minute Collapse: How Fake Compliance Broke the AI Supply Chain

In March 2026, a 40-minute supply chain attack on the open-source library LiteLLM allowed hackers to steal four terabytes of highly sensitive data from Mercor, a $10 billion AI training startup. The breach exposed a fragile trust infrastructure across the tech industry, revealing that LiteLLM's security certifications were fabricated by Delve Technologies, a compliance vendor that systematically rubber-stamped fake audits. As major AI labs like Meta indefinitely pause their contracts, Mercor now faces a wave of class-action lawsuits alleging that its mandatory, invasive contractor surveillance practices funneled unauthorized third-party trade secrets and personal data straight to cybercriminals.

https://compliancehub.wiki/mercor-litellm-delve-class-action-supply-chain-compliance-fraud/

https://compliancehub.wiki/five-lawsuits-mercor-data-breach-litigation-breakdown/

Sponsors

www.breached.company

www.compliancehub.wiki