Mercor Contractor Data Breach
Mercor Contractor Data Breach
Mercor was affected by a March 2026 supply-chain attack that exposed contractor information, including Social Security numbers, government IDs, financial information, facial biometric data, voice recordings, and AI video interview footage. ClaimsHero, an Arizona-based law firm (AO No. 2024 - 186) with over 600,000 users, is representing data breach victims on a no-win, no-fee contingency basis.
Est. Damages:
Up to $5,000+
Status:
Accepting Submissions
Time to Submit:
Est. 3 min
Overview
In March 2026, Mercor publicly disclosed that it was affected by a supply-chain attack involving the LiteLLM open-source library. According to public reporting and lawsuits filed against Mercor, the incident allegedly exposed approximately 4 terabytes of contractor data, including Social Security numbers, government IDs, payment information, facial biometric data, voice recordings, and AI video interview footage.
The hacking group LAPSUS$ has reportedly claimed responsibility and is allegedly auctioning the data on the dark web. Mercor contractors who may have been affected may be eligible to bring an individual arbitration claim against Mercor under the arbitration provision in its Worker Agreement.
Eligibility
You may qualify if you contracted with Mercor (or applied to) and provided personal information as part of onboarding, identity verification, or payment setup. You are potentially eligible if:
You signed a Mercor Worker Agreement or submitted a W-9 to Mercor.
You uploaded a passport, driver's license, or other government ID for Mercor identity verification.
You completed a recorded AI video interview, assessment, or onboarding call with Mercor.
You received a breach notification from Mercor.
This is not a complete list. You may still be eligible if you provided other personal information to Mercor. Complete our form to check whether you may qualify. To proceed, you must be willing to bring an individual arbitration claim against Mercor. No outcome is guaranteed.
See If You Qualify for a Mercor Data Breach Claim
Mercor contractors entrusted the company with some of their most sensitive personal information, including Social Security numbers, government-issued IDs, financial information, facial and voice biometric data, and AI video interview recordings.
According to public reporting and lawsuits filed against Mercor, the March 2026 breach may put affected contractors at long-term risk of harms that ordinary credit monitoring cannot fully address, including identity theft, deepfake impersonation, fraudulent account creation, tax fraud, and misuse of biometric information.
ClaimsHero can help determine whether you may be eligible to pursue an individual arbitration claim.
Start today
in minutes
ClaimsHero simplifies the end-to-end legal process for you. And it's always $0 out of pocket.
When you win, we win.
1.
Discover if you're eligible
2.
Complete your submission
3.
ClaimsHero's got it
4.
You win, we win
Frequently Asked Questions
Yes, ClaimsHero is an Arizona law firm.
Mercor.io Corporation, the AI recruiting and data-training company involved in a March 2026 data breach that exposed personal and sensitive data about Mercor contractors. Mercor's Worker Agreement with contractors requires that disputes be resolved through arbitration before JAMS, which is the forum where any individual legal claim would be brought.
Mercor reportedly began notifying affected contractors by email on or about March 31, 2026. If you contracted with Mercor — including signing a Worker Agreement, submitting a W-9, uploading a government ID for identity verification, or completing a recorded AI video interview — your information may have been included in the data that was allegedly exfiltrated. Even if you have not received a direct notice from Mercor, you may still be eligible to check whether your data may have been affected.
According to public reporting and lawsuits filed against Mercor, contractors whose data may have been exposed may face risks including:
- Identity theft and synthetic identity fraud (using stolen Social Security numbers and government IDs)
- Deepfake impersonation (using stolen high-definition video and voice recordings)
- Bypass of video know-your-customer checks at banks and crypto exchanges
- Fraudulent account creation and tax fraud
- Targeted phishing or social engineering attacks
Unlike a credit card or password, biometric data such as facial scans and voice recordings cannot be reset.
Mercor's Worker Agreement requires disputes between contractors and Mercor to be resolved through arbitration. That is why ClaimsHero and partner firms are bringing individual legal claims for contractors as a mass arbitration campaign rather than a class action lawsuit.
No. ClaimsHero and our law firm partners work on a contingency fee basis. We advance the costs of investigating, filing, and litigating your legal claim. If we resolve your claim with a settlement or favorable judgment, we earn a percentage of your monetary recovery. If there is no recovery, you owe us nothing.
Mercor reportedly contracts with workers around the world, including in the EU, UK, and India. Eligibility for an individual arbitration claim depends on the terms of your specific Worker Agreement and on applicable law. If you reside outside the U.S., you can submit our intake form and counsel will review your situation.
Click "See If You Qualify" and answer a few short questions to see if you may be eligible. It takes about three minutes. If you may be eligible, the lawyers working with ClaimsHero will contact you with next steps.
ClaimsHero is an Arizona law firm that helps people bring legal claims against corporations that may have harmed them. We work with experienced attorneys to make the legal process more straightforward, fair, and accessible — at no upfront cost to you.
If you have more questions, feel free to reach out to our support team for detailed assistance and guidance.
Contact Us
