3 reportsMedium

LiteLLM supply chain attack and data breaches

A supply chain attack on LiteLLM and multiple data breaches affecting UK organisations have been reported, highlighting ongoing cybersecurity risks.

First report 26 Oct 2026Latest 9 Nov 2026, 17:03 UK time

What is going on

A supply chain attack on LiteLLM was traced to a master key exposed on GitHub for months.
A data breach at Iris Plaza may have exposed data of 7.7 million customers after hackers compromised an external cloud service.
A toilet paper maker's customer data was exposed, affecting UK shoppers with no confirmation of whether the data was securely removed.
The incidents highlight vulnerabilities in software supply chains and cloud services that could impact UK organisations.
What to watch: Further details about the extent of data exposure and confirmation of whether affected organisations have implemented mitigation measures.

Newest first. Each one is a separate event with its own sources and evidence.