Mercor Breach Claim Says Biometric Data, PII and Source Code Were Offered for Sale
Summary
A sale listing reportedly claimed Mercor data—including biometric information, PII, source code and bucket data—was exposed. The listing cited 211GB of database data and 939GB of code; attribution to Resolute and Lapsus$ remains a claim.
Key points
- Mercor was reportedly named as the target in a breach-related sale listing; the article does not provide independent confirmation.
- The listing reportedly offered biometric and personal information, as well as source code and bucket data.
- The listing claimed 211GB of database data and 939GB of code.
- Resolute and Lapsus$ were named in attribution claims; the article provides no supporting evidence for those claims.
Article Details
- Victim Organization
- Mercor
- Incident Type
- Reported data breach with data offered for sale
- Data Types Exposed
- Biometric data
- Personally identifiable information
- Source code
- Bucket data
- Affected Records
- The listing claimed data on every registered user; no record count was provided.
- Affected Data Size
- The listing claimed 211GB of database data and 939GB of code.
- Ransom Or Extortion
- A one-time sale listing reportedly offered the data for sale; no ransom demand was reported.
- Claim Status
- claimed