LiteLLM Hack Exposes 2500 Companies, 195TB Data Leaked

In March, the open-source AI API gateway LiteLLM suffered a supply chain attack, with attackers stealing large amounts of password data within about 40 minutes. Security firms CloudSEK and Hudson Rock reported that over 2,500 companies worldwide were affected, with 195TB of data leaked, including around 434,000 CI/CD pipeline credentials.

LiteLLM is an AI infrastructure tool with 95 million monthly installs, letting developers access APIs from over 100 providers like OpenAI and Anthropic. Leaked data includes cloud keys, repository tokens, SSH keys, and Kubernetes secrets. Major firms like Nvidia, Amazon, and Samsung are among those affected.

Researchers call this the largest AI supply chain breach of 2026, urging companies to review API gateway security and update dependencies promptly.