The Architecture of an AI-Powered Breach: The Shadow Supply Chain | UpGuard

This report analyzes three AI-related 'shadow pipeline' incidents—(1) engineers pasting proprietary semiconductor source code into a consumer LLM leading to IP exposure, (2) a contractor uploading thousands of rows of personal data to an unmanaged LLM causing a large PII breach, and (3) a cloud-infrastructure compromise where attackers harvested OAuth tokens after breaching a third-party AI vendor (via an infostealer chain) to access Vercel customer environment variables—then recommends policy, identity-governance, and real-time browser enforcement controls to mitigate such risks.