Since revealing a significant data breach on March 31, Mercor has struggled to maintain its standing in the AI sector, facing mounting challenges. The breach reportedly involved a hacker group that claims to have acquired 4TB of sensitive data, including candidate profiles and source code. This incident has led to serious repercussions for the company, including an indefinite pause on contracts from Meta.
Mercor, which previously secured $350 million in a Series C funding round, has seen its valuation drop to $10 billion. The breach was traced back to an open-source tool, LiteLLM, which contained malware that could harvest login credentials. This vulnerability allowed further unauthorized access to Mercor’s systems.
While OpenAI is investigating its potential exposure linked to the breach, it has not yet suspended its contracts with Mercor. Additionally, multiple large AI model makers are reportedly reconsidering their partnerships with the firm. In a separate development, five contractors of Mercor have initiated lawsuits related to the exposure of personal data, raising questions about the legal ramifications for the company.