Threat intelligence / Technique

Data

Data is a key vector of supply chain compromise for adversaries. Every AI project will require some form of data. Many rely on large open source datasets that are publicly available. An adversary could rely on compromising these sources of data. The malicious data could be a result of [Poison Training Data](/techniques/AML.T0020) or include traditional malware. An adversary can also target private datasets in the labeling phase. The creation of private datasets will often require the hiring of outside labeling services. An adversary can poison a dataset by modifying the labels being generated by the labeling service.

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

Data is a key vector of supply chain compromise for adversaries. Every AI project will require some form of data. Many rely on large open source datasets that are publicly available. An adversary could rely on compromising these sources of data. The malicious data could be a result of [Poison Training Data](/techniques/AML.T0020) or include traditional malware. An adversary can also target private datasets in the labeling phase. The creation of private datasets will often require the hiring of outside labeling services. An adversary can poison a dataset by modifying the labels being generated by the labeling service.

8 recorded

Relationships

mitigates

from AI Red Team

Mitigation

mitigates

from Control Access to AI Models and Data at Rest

Mitigation

mitigates

from Maintain AI Dataset Provenance

Mitigation

mitigates

from Sanitize Training Data

Mitigation

mitigates

from Verify AI Artifacts

Mitigation

subtechnique-of

to AI Supply Chain Compromise

Technique

uses

from Tay Poisoning

Campaign

uses

from VirusTotal Poisoning

Campaign

1 external

References

mitre-atlas

AML.T0010.002