LiteLLM supply chain attack leaks credentials from 2,488 organizations
A supply chain attack using a malicious release of LiteLLM led to the leak of credentials from many organizations. The attack was linked to the Trivy hack. An analysis published on August 14 put the stolen data at 433,909 files totaling 153 GB across 2,488 organizations.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 153 GB of credential data, 433,909 files, tied to 2,488 organizations
- Cause / method
- Supply chain attack via a malicious LiteLLM release linked to the Trivy hack
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- A malicious LiteLLM release was linked to the Trivy hack, and it was suggested that more than 2,100 organizations may have been affected.
- 153 GB of credential data stolen in the supply chain attack came to light.
- The analysis tallied the stolen data at 433,909 files tied to 2,488 organizations.
5 related reports
- Terabytes of credentials leaked in massive supply-chain attack
- Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
- 153GB of stolen credentials surface after LiteLLM supply chain attack
- Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
- From CI Pipeline to Ransomware & Breaches: 6 High-Profile Breaches in the LiteLLM/Trivy Attack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.