Home
Ai
Ai News
CloudSEK Identifies AI Supply Chain Exposure Affecting More Than 2,500 Organisations

CloudSEK Identifies AI Supply Chain Exposure Affecting More Than 2,500 Organisations

Cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, and more were stolen from the affected organisations.

Written by Nithya P Nair, Edited by Rohan Pal | Updated: 13 August 2026 14:36 IST

CloudSEK Identifies AI Supply Chain Exposure Affecting More Than 2,500 Organisations

Photo Credit: Reuters

In March 2026, the threat actor group TeamPCP orchestrated the attack

Click Here to Add Gadgets360 As A Trusted Source

Highlights

Over 2,500 firms could have been impacted by an AI supply-chain attack
LiteLLM is an open-source tool
CloudSEK said the incident was more than a software supply-chain breach

Cybersecurity firm CloudSek has identified an AI supply-chain attack on LiteLLM that affected more than 2,500 organisations. The incident, which reportedly occurred in March this year, seems to have potentially exposed around 4,34,000 automated software development pipelines. The attack reportedly exposed data of many leading tech brands, including Microsoft, X, Amazon, Cisco, Samsung and Salesforce.

Over 2,500 Organisations Potentially Exposed in AI Supply Chain Incident

In a blog post, CloudSEK confirmed that more than 2,500 companies and 4,34,000 CI/CD pipelines worldwide were exposed in the largest AI supply chain breach of 2026. In March 2026, the threat actor group TeamPCP orchestrated a supply chain attack targeting AI infrastructure by compromising LiteLLM.

The company claimed that CloudSEK Threat Intelligence gained access to the victims' information and has disclosed the details of all the impacted victims. The list shared by CloudSEK includes names such as Nvidia, AWS, Samsung, Salesforce, Cisco, ServiceNow, Siemens, Accenture Federal Services, X, MediaTek, Munich, Thomson Reuters, London Stock Exchange Group, FedEx, Volkswagen, Orange, and HP.

This 'Digital Lutera' Android Malware Can Hijack Your UPI Account

CloudSEK said that cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys were stolen from the listed companies. The attackers also reportedly targeted LLM API keys and gateway configuration. The research firm said that stolen objects allow attackers to move into other systems.

The cybersecurity firm also notes that removing the affected package does not resolve the problem because stolen credentials remain usable for weeks or months unless they are rotated and downstream activity is investigated. The company states that the latest AI infrastructure is becoming an attractive target for attackers, as Gateways, agents, vector stores, model endpoints, and MCP servers can give access to confidential data and systems.

Zoom Security Flaw Could Allow Hackers to Take Control of Your Device

CloudSEK said the incident was more than a software supply chain breach involving an AI product. "It demonstrated that compromising an AI control point can expose the identities and systems around it. Future attacks are likely to target the AI layer precisely because it is connected to everything else," it added.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: CloudSEK, CloudSEK Report, AI

Nithya P Nair

Email Nithya P Nair

Nithya P Nair is a journalist with more than five years of experience in digital journalism. She specialises in business and technology beats. A foodie at heart, Nithya loves exploring new places (read cuisines) and sneaking in Malayalam movie dialogues to spice up conversations. More