AI startup Mercor, which provides data to firms like OpenAI and Anthropic, confirmed that it was hit by a security breach that could have exposed sensitive user and company data. The breach has been linked to a supply-chain attack involving LiteLLM, a tool for connecting apps with AI services. The attack inserted malicious code into the software to collect credentials.