2,500+ Companies and 434,000 CI/CD Pipelines Exposed in the Largest AI Supply Chain Breach of 2026 | CloudSEK
🚀 Introducing the CloudSEK MCP Server!
Read more
🚀 CloudSEK becomes first Indian origin cybersecurity company to receive investment from US state fund
Read more
🚀 CloudSEK Becomes First Indian Cybersecurity Firm to partner with The Private Office
Read more
🚀 CloudSEK has raised $19M Series B1 Round – Powering the Future of Predictive Cybersecurity
Read more
Solutions
Resources
Free Tools
Log in<br>Schedule a Demo
Schedule a Demo
Back
Adversary Intelligence
2,500+ Companies and 434,000 CI/CD Pipelines Exposed in the Largest AI Supply Chain Breach of 2026<br>CloudSEK’s latest research examines the LiteLLM AI supply-chain attack, which potentially exposed 2,500+ organisations and 434,000 CI/CD pipelines worldwide. The report details the risks to cloud credentials, source-code repositories, Kubernetes environments and AI infrastructure, while highlighting how compromised AI dependencies can create enterprise-wide security exposure.<br>August 11, 2026
min
Table of Content
Example H2
Example H2
Subscribe to CloudSEK Resources<br>Get the latest industry news, threats and resources.
Subscribe
No items found.
Executive Summary<br>In March 2026, the threat actor group Team PCP orchestrated what is believed to be the largest supply chain attack targeting AI infrastructure by compromising LiteLLM . CloudSEK Threat Intelligence was able to get access to the victim information and is disclosing the details of all the impacted victims .<br>We are sharing this openly so that every affected organization can act proactively The threat is still live: the FBI's July 2026 FLASH advisory (FLASH-20260702-01) warns that affiliated actors are likely to weaponize the harvested credentials long after the original intrusion, which means further supply chain attacks remain a real possibility. Early awareness is the strongest defense; knowing you were impacted lets you rotate credentials, close the exposure, and harden before the next campaign hits.<br>Attacks on AI infrastructure are on the rise and that is exactly what CloudSEK AIvigil, our AI Attack Surface Monitoring platform, is built to prevent. AIvigil continuously discovers, monitors, and secures exposed AI infrastructure, MCP servers, leaked AI credentials, vector databases, agentic workflows, and shadow AI. We combine the power of cyber threat intelligence and AI exposure to detect and prevent cyberattacks on AI infrastructure.<br>Those exposed range from large AI companies and model providers to cybersecurity vendors, SaaS platforms, and enterprises worldwide.<br>Check if your organization is exposed in this AI Supply Chain Breach : https://exposure.cloudsek.com/ai-supply-chain-incident
2,500+
companies in CloudSEK's reconstructed<br>exposure dataset
434,000
CI/CD pipelines potentially exposed
40 min
approximate period the affected PyPI<br>packages were live
<br>VICTIM EXPOSURE DATA<br>Selected High-Confidence Organizations in the Exposure Dataset<br>The records below are the leading organization-level matches supplied for this report. High confidence refers to the strength of the exposure match,not proof of successful compromise or attacker use.<br>“Secrets” and “Runs” are reproduced as aggregate counts from the supplied dataset. Domains are shown only where provided. No secret values, credentials, internal paths, or personal information are included.<br>Full list is here -
Organization / domain<br>Secrets<br>Runs<br>Confidence
NVIDIA Corporation
nvidia.com
153
176
High
Amazon Web Services (AWS)
amazon.com
19
12
High
Samsung Electronics
samsung.com
10
19
High
Salesforce, Inc.
High
Cisco Systems, Inc.
cisco.com
327
1,900
High
F. Hoffmann-La Roche AG
roche.com
16
High
Accenture Federal Services
accenturefederal.com
12
High
ServiceNow
servicenow.com
44
162
High
Siemens AG
siemens.com
21
138
High
S&P Global
spglobal.com
1,218
1,108
High
Airbus U.S. Space & Defense
airbus.com
64
High
John Deere
deere.com
185
203
High
Regeneron Pharmaceuticals, Inc.
regeneron.com
184
57
High
Selected High-Confidence Organizations — continued
Organization / domain<br>Secrets<br>Runs<br>Confidence
Robert Bosch GmbH
High
London Stock Exchange Group (LSEG)
lseg.com
48
241
High
Thomson Reuters
thomsonreuters.com
36
High
FedEx
fedex.com
164
147
High
Munich Re
munichre.com
110
62
High
MediaTek Inc.
mediatek.com
126
119
High
Volkswagen AG
volkswagenag.com
2,242
High
Deloitte
deloitte.com
462
503
High
The Kroger Co.
kroger.com
95
35
High
Siemens Energy
siemens-energy.com
36
High
Thales Group
thalesgroup.com
146
266
High
X Corp (Twitter)
twitter.com
3,459
1,153
High
Zscaler, Inc.
zscaler.com
65
304
High
Epic Games
epicgames.com
62
31
High
Selected High-Confidence Organizations , continued
Organization / domain<br>Secrets<br>Runs<br>Confidence
Orange S.A.
orange.com
180<br>5,642<br>High
HP...