In brief: Researchers have gained insight into the data leaked in the March LiteLLM supply chain attack, which affects more than 2,500 companies.
Security researchers have gained access to leaked data from the March LiteLLM supply chain attack. According to their findings, more than 2,500 companies are affected.
In the supply chain attack on LiteLLM, a widely used open-source framework for the unified integration of various LLM APIs, which became known in March, data from companies was exfiltrated. IT researchers have now gained insight into these datasets and put the number of affected companies at more than 2,500. According to the report, details on the exact nature of the compromised data and the technical course of the attack remain limited so far.
For CISOs, the case is relevant because LiteLLM, acting as a link between applications and various LLM providers, frequently processes or passes through central credentials such as API keys. A supply chain attack on such a middleware component can therefore have an impact far beyond the immediate software vendor, affecting all downstream users regardless of whether they themselves caused the vulnerability.
Companies using LiteLLM in their AI infrastructure should check whether they are affected by the software, compare the versions in use against the vendor’s information, and, when in doubt, rotate affected API keys and credentials. Since the figure of 2,500 affected companies is based on a retrospective analysis of the leaked data, it is also advisable to check whether one’s own organization appears in these datasets.
Source: www.heise.de · Published August 13, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.