TeamPCP Claims to Sell Stolen Mistral AI Repositories for $25,000
Summary
TeamPCP claims to offer nearly 450 Mistral AI repositories for sale after a TanStack supply-chain attack. Mistral says a codebase management system was compromised and some SDK packages briefly contaminated, but core repositories and hosted services were not compromised
Key points
- TeamPCP claims it stole about 5 GB of internal repositories and source code and is offering nearly 450 repositories for $25,000.
- Mistral AI says the incident followed the TanStack supply-chain attack and involved a compromised codebase management system.
- Mistral says some SDK packages were briefly contaminated.
- Mistral's forensic investigation found the impacted data was not part of its core code repositories.
- Mistral says its hosted services, managed user data, and research and testing environments were not compromised.
Article Details
- Victim Organization
- Mistral AI
- Incident Type
- Supply-chain compromise involving a codebase management system and contamination of some SDK packages
- Data Types Exposed
- Internal repositories and source code (claimed by TeamPCP)
- Affected Records
- TeamPCP claims to have stolen nearly 450 repositories; Mistral AI said the affected data was not part of its core code repositories.
- Affected Data Size
- Approximately 5 GB, according to TeamPCP; not independently confirmed.
- Operational Impact
- Mistral AI said some SDK packages were briefly contaminated. It stated that its core code repositories, hosted services, managed user data, and research and testing environments were not compromised.
- Ransom Or Extortion
- TeamPCP offered the repositories for $25,000, said the price was negotiable, and threatened to leak them publicly if no buyer was found within a week. The claimed theft and repository set were not independently confirmed.
- Claim Status
- confirmed
MITRE ATT&CK
Threat Actors
Vendors
Mistral AITeamPCP is threatening to leak nearly 450 Mistral AI repositories after claiming to have stolen internal source code and data from a compromised codebase management system.TanStackMistral AI says the incident stemmed from the TanStack supply-chain attack, but that its core repositories, hosted services, and research environments were not compromised.