Est. 2001·3,000+ placements · six offices · four regions
Cybersecurity Incidentcurated sourcedetected 2026-07-10 · confidence 95%

Last updated

Mercor: Cybersecurity Incident

In March 2026, Mercor suffered a supply chain attack on LiteLLM (open-source Python library) that exposed up to 4TB of internal data and contractor records. Meta, a major client, paused all work indefinitely. Class action lawsuits followed. Former employees suspected North Korean operatives had infiltrated the contractor network using stolen credentials.

Source: TechFundingNews

Who
Mercor · USA
What happened
In March 2026, Mercor suffered a supply chain attack on LiteLLM (open-source Python library) that exposed up to 4TB of internal data and contractor records. Meta, a major client, paused all work indefinitely. Class action lawsuits followed. Former employees suspected North Korean operatives had infiltrated the contractor network using stolen credentials.
When
2026-07-10

Market context: Against a Talent Market Index of 97.6 (Neutral) (down 3.4 month-on-month), Americas is at easing (-15.6pts) on signal share.

Mercor: 1 signal in the last 90 days; 0.1% of MitchelLake's EMEA signal flow; 5 tracked across 215 days.

MitchelLake in this thematic

Also at Mercor →

More signals across Americas

Cybersecurity Incident · Americas

CIRO →

CIRO, Canada's investment self-regulatory organization, faces a proposed $8.3 million settlement over a data breach affecting 750,000 Canadians, including credit monitoring and up to $10,000 reimbursement per claimant.

Cybersecurity Incident · Americas

Across Protocol →

Across Protocol, a cross-chain bridge protocol, is investigating a potential security incident affecting its domain; users report drained wallets after interacting with the platform and the protocol has told users to avoid the app.

Cybersecurity Incident · Americas

The Vanguard Group, Inc. →

A reported data breach at The Vanguard Group may have exposed investors' Social Security numbers. The disclosure comes via a plaintiff-side law firm's investigation announcement, so the breach is not yet confirmed by the company in this source.

Cybersecurity Incident · Americas

Amplifon Americas →

Hackers stole personal, health, and insurance information, including Social Security numbers, from Amplifon Americas' internal systems, affecting about 1.3 million people.

Cybersecurity Incident · Americas

Vanderbilt University →

Vanderbilt University announced a cyberattack that may have impacted campus devices and systems, with students and employees warned.

Cybersecurity Incident · Americas

York University →

York University disclosed a breach in which a threat actor stole personal information submitted through its online forms, with records reaching back to 2007.

Where this lands in our work

Weekly briefing

Track companies like Mercor — with our analysis

Anyone can set an alert for one company. We send a weekly read on the whole peer set — who's moving, and what it means for leadership. Pick what to follow:

Intelligence powered by Autonodal ↗

Nearby in the record