LiteLLM supply chain attack leaks credentials from 2,488 organisations
A supply chain attack using a malicious release of LiteLLM led to the leak of credentials from many organisations. The attack was linked to the Trivy hack. An analysis published on 14 August put the stolen data at 433,909 files totalling 153 GB across 2,488 organisations.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 153 GB of credential data, 433,909 files, tied to 2,488 organisations
- Cause / method
- Supply chain attack via a malicious LiteLLM release linked to the Trivy hack
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- A malicious LiteLLM release was linked to the Trivy hack, and it was suggested that more than 2,100 organisations may have been affected.
- 153 GB of credential data stolen in the supply chain attack came to light.
- The analysis tallied the stolen data at 433,909 files tied to 2,488 organisations.
5 related reports
- Terabytes of credentials leaked in massive supply-chain attack
- Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
- 153GB of stolen credentials surface after LiteLLM supply chain attack
- Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
- From CI Pipeline to Ransomware & Breaches: 6 High-Profile Breaches in the LiteLLM/Trivy Attack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.