Luxor Technology said attackers redirected mining machines through its Commander platform starting around 6 p.m. Pacific time on Nov. 14, 2026, affecting just over a dozen customer accounts. In a Nov. 15 statement, Luxor said it patched Commander within two hours and began restoring affected machines. The company said no data was stolen, its mining pool and LuxOS firmware were unaffected, and it would compensate affected customers for diverted mining power.
CEO Nick Hansen described the intrusion as “AI-enabled,” but Luxor has not published technical findings explaining how it happened. Reports estimating that 64,000 machines and 13 exahash per second were redirected remain unverified; Luxor’s account count does not establish how many machines were affected. A suspected destination address showed estimated mining rewards, but available blockchain records showed no confirmed incoming payments.
