EVENT DOSSIER
On August 27, 2026, Australian Federal Police announced the arrest of two members suspected of being involved in the TeamPCP hacking group. This organization recently carried out attacks on several entities, including Mercor, OpenAI, and the European Commission. By disrupting software supply chains and maliciously modifying open-source tools, they stole private keys and sensitive data, resulting in the theft of over five hundred credentials. The suspects are accused of more than ten crimes, including hacking and money laundering, and are expected to appear in court on Thursday. Brett Leatherman, head of the FBI’s Cyber Division, stated that the group had infiltrated over a thousand organizations. Australian police began investigating in April 2026, seized a large amount of stolen data and equipment, and plans to notify the victims.
Australian police → TeamPCP hackers 逮捕两名黑客成员
澳大利亚警方逮捕两名涉嫌参与 TeamPCP 黑客组织的成员，该组织近期针对 Mercor、OpenAI 等机构发动攻击。两人被指控犯有超过十项包括黑客攻击和洗钱在内的罪行，预计周四出庭受审。据澳联邦警方声明，嫌疑人实施了广泛的数据泄露与篡改行为，试图感染大量计算机以窃取凭证并勒索赎金。FBI 网络部门主管 Brett Leatherman 称，该团伙已入侵超过一千个组织。TeamPCP 通过破坏软件供应链、恶意修改开源工具来窃取私钥及敏感数据，此次行动导致超过五十万凭证被盗，影响了依赖 Trivy 漏洞扫描器的 LiteLLM、Mercor 等公司，并涉嫌入侵欧盟委员会云基础设施及 GitHub、OpenAI 相关项目。澳警方于 2026 年 4 月启动调查，已扣押大量被盗数据及设备，并计划通知受害者。