{"schema_version":"0.10.0","id":"LR-2026-0533","record_version":1,"title":"Mistral AI source code stolen in data breach and offered for sale","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":54.7,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":2.88,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":2,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"f2c5e041f3a3c1e915c1a706e5398331a920c835730355daee92d4b32ab3f19d"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-05-12","date_disclosed":"2026-05-12","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"A supply-chain attack on the open-source TanStack ecosystem, attributed to the group TeamPCP, reached Mistral AI's development environment. Attackers chained GitHub Actions weaknesses to publish malicious packages through TanStack's trusted pipeline, and the malware spread to Mistral's own SDK packages. Mistral said attackers temporarily compromised one codebase management system on May 12, 2026, and that it neutralized the attack and launched a forensic investigation. The group then offered about 450 repositories for sale at $25,000, claiming they contain internal AI source code and training material. These claims remain unverified, and Mistral's advisories do not confirm the advertised scope.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":"third_party","adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Attack neutralised, infrastructure secured, forensic investigation launched with relevant authorities","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Test: data of others touched with a bounded scope stated. Fact: the attackers accessed certain non-core code repositories only, per Mistral's account as reported.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://oecd.ai/en/incidents/2026-05-12-3594","publisher":"OECD AI Policy Observatory","date":"2026-05-12","type":"press","title":"Mistral AI Source Code Stolen in Major Data Breach - OECD AI Policy Observatory","archived_url":null,"attachment":"first_report"},{"url":"https://www.safestate.com/post/hackers-put-mistral-ai-source-code-up-for-sale-after-supply-chain-attack","publisher":"Safestate","date":"2026-05-20","type":"press","title":"Hackers Put Mistral AI Source Code Up for Sale After Supply Chain Attack - Safestate","archived_url":null}],"per_field_confidence":{"event.date_occurred":"C","event.responsible_party":"C","event.remediation":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.date_occurred":[{"source_index":1,"quote":"A company spokesperson confirmed that attackers temporarily compromised one of its codebase management systems on May 12, 2026, through a third-party software supply chain attack."}],"event.responsible_party":[{"source_index":1,"quote":"A company spokesperson confirmed that attackers temporarily compromised one of its codebase management systems on May 12, 2026, through a third-party software supply chain attack."}],"event.remediation":[{"source_index":1,"quote":"Mistral said it quickly neutralized the attack, secured its infrastructure, and launched a forensic investigation with relevant authorities."}],"event.incident_class":[{"source_index":1,"quote":"The Mistral AI data breach stems from a sophisticated supply chain attack that compromised developer environments across the broader open-source software ecosystem."}],"impact.severity":[{"source_index":1,"quote":"The attackers accessed certain non-core code repositories only."}],"impact.severity_because":[{"source_index":1,"quote":"The attackers accessed certain non-core code repositories only."}],"event.summary":[{"source_index":1,"quote":"The Mistral AI data breach stems from a sophisticated supply chain attack that compromised developer environments across the broader open-source software ecosystem."},{"source_index":1,"quote":"The attack chained three GitHub Actions vulnerabilities in sequence."},{"source_index":1,"quote":"A company spokesperson confirmed that attackers temporarily compromised one of its codebase management systems on May 12, 2026, through a third-party software supply chain attack."},{"source_index":1,"quote":"Mistral said it quickly neutralized the attack, secured its infrastructure, and launched a forensic investigation with relevant authorities."},{"source_index":1,"quote":"The claims remain unverified."},{"source_index":1,"quote":"Mistral's advisories do not confirm a breach of the scope TeamPCP is advertising."}]},"notes_on_gaps":"No autonomous AI agent is described in any source, so event.agent_involved, failure_class and trigger are left out. The sources do not state a detection method or disclosure date, so those fields are omitted (source 0's header date is not used as a disclosure date). Source 0 presents the theft as fact, while source 1 says the claims remain unverified and Mistral disputes the scope; the affected description carries the 'as claimed' qualifier. The $25,000 is an asking price, not a loss, so no direct loss is recorded. No records count, affected third-party count, time to contain, country, or model/system details are stated. Severity 'moderate' is my judgement from the bounded-scope statement; the sources do not state an affected-party count meeting the major test. No remediation is recorded with controls because the sources do not name specific controls added. Control G1 outcome 'failed' is my reading that signed provenance verified a malicious package from a compromised pipeline. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"caught","text":"Mistral said it quickly neutralized the attack, secured its infrastructure, and launched a forensic investigation with relevant authorities.","quote":"Mistral said it quickly neutralized the attack, secured its infrastructure, and launched a forensic investigation with relevant authorities.","source_index":1,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://oecd.ai/en/incidents/2026-05-12-3594","https://www.safestate.com/post/hackers-put-mistral-ai-source-code-up-for-sale-after-supply-chain-attack"]},"analysis":{"sections":{"timeline":[{"text":"TeamPCP published 84 malicious npm package artifacts across 42 packages in the TanStack namespace.","quote":"On May 11, 2026, between 19:20 and 19:26 UTC, TeamPCP published 84 malicious npm package artifacts across 42 packages in the TanStack namespace.","source_index":1,"when":"May 11, 2026, between 19:20 and 19:26 UTC"},{"text":"Attackers temporarily compromised one of Mistral AI's codebase management systems.","quote":"A company spokesperson confirmed that attackers temporarily compromised one of its codebase management systems on May 12, 2026, through a third-party software supply chain attack.","source_index":1,"when":"May 12, 2026"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://oecd.ai/en/incidents/2026-05-12-3594","https://www.safestate.com/post/hackers-put-mistral-ai-source-code-up-for-sale-after-supply-chain-attack"]}}