Mercor Data Breach | What You Need to Know

Mercor, a $10 billion AI startup, confirms it was caught up in a major security incident | Fortune

The high-flying startup that provides AI training data to OpenAI, Anthropic, and Meta confirms it was hit by a “supply-chain attack.”

How a 40-Minute Window Brought Down a $10 Billion AI Startup: The Mercor Data Breach, Explained

A poisoned open-source package, a credential-stealing payload, and 4 terabytes of stolen data here’s what every AI company needs to learn…

AI company’s breached biometrics, ID document images make deepfake fraud easier | Biometric Update

Mercor, an AI company valued at $10B, has fallen victim of a major data breach which appears to include ID documents along with user face and voice biometrics.

Mercor Breach Linked to LiteLLM Supply-Chain Attack

A LiteLLM supply-chain compromise enabled attackers to harvest credentials and access internal environments at scale at Mercor. The firm was the first to confirm a

Mercor on Twitter / X

The privacy and security of our customers and contractors is foundational to everything we do at Mercor. We recently identified that we were one of thousands of companies impacted by a supply chain attack involving LiteLLM.Our security team moved promptly to contain and…— Mercor (@mercor_ai) March 31, 2026

Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk

Major AI labs are investigating a security incident that impacted Mercor, a leading data vendor. The incident could have exposed key data about how they train AI models.

Mercor’s 23-Year-Old Billionaire Founders Grapple With Employee Fraud And North Korean Infiltration

Founded in 2023 by 20-somethings, data labeling startup Mercor exploded to $1 billion in annualized revenue run rate earlier this year. Now it's confronting a wave of challenges, including an employee stealing money, security blunders and cultural growing pains.

Top AI Security Incidents of 2025 Revealed | Adversa AI

Discover how AI systems are being hacked in the wild — from prompt injection to agent abuse — with real breaches, lessons, and defenses in Adversa AI’s 2025 report.

Software company plans to pay tens of millions in ransom to hackers who crippled car dealerships across North America | Fortune

Since CDK discovered the breach and shut off systems on June 19, chaos has ensued at many of the roughly 15,000 car dealerships that it counts as clients.

Haotian AI : Providing Deepfake AI For Scam Bosses - Frank on Fraud

An advertisement for Haotian AI, a company that provides face-changing software on Telegram, shows they mean business. “We have an R&D team of hundreds of programmers and dozens of servers to serve you.” The braggy advertisement, which just might be directed at Pig Butchering bosses running scam compounds in Southeast Asia, reveals the extent of […]

AI Agent Executes 'First' End-To-End Ransomware Attack - Slashdot

Sysdig says it has documented the first ransomware attack carried out end to end by an AI agent, which autonomously exploited exposed systems, stole credentials, established persistence, compromised a production database, and destroyed data. The research team named the attacker "JadePuffer" and said...

Bunzz | Modular Smart Contracts Dev & AI-Based Audit

Comprehensive dev tool for Smart Contracts, AI based audit, and analysis.

Unauthorized access, personal data leaks surge in Japan | NHK WORLD-JAPAN News

A series of cyberattacks have led to leaks of large amounts of personal data from companies across Japan. Experts say the misuse of AI may be contributing to the growing threat. As this new challenge emerges, how should companies, and society as a whole, respond?

Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud

Scientific fraud is the instrument of doubt that malicious entities can use to establish controversy in science. Historically, it required the resources of a company: deep pockets, ghostwritten articles, and corrupt academics. Today, Artificial Intelligence (AI) is increasingly automating scientific research, so we ask: Can a remote adversary weaponize the honest use of AI in science to compromise scientific integrity? We envision and empirically evaluate a new attack, indirect data poisoning, in which an adversary corrupts an open dataset and uploads the poisoned variant to a public repository. Autonomous research agents may independently retrieve and process this data, turning honest scientists into the unpaid and unwitting distributors of fraud at scale. Across five socially-salient topics, from hiring discrimination to the safety of autonomous vehicles, three widely used frontier AI systems (Claude Code with Claude Opus 4.7, Codex with GPT-5.5, Gemini CLI with Gemini 3.1 Pro), and 450 ethically contained experimental runs, we find that poisoning succeeds in 49.56% of runs, while the rate of poisoning detection is only 6.0%. The attack requires no topic-specific trigger-words, agent access, indirect prompt injection, or fabricated papers, only the open data ecosystem and misleading metadata. To mitigate the attacks, we propose and evaluate two measures: a scientist persona and a data provenance audit with five checks (referencing papers, social markers, statistical anomalies, related datasets, poisoning caution). We find that the persona still leaves 16.67% of runs with a poisoned conclusion, but provenance auditing reduces attack success rate to zero. Our results suggest that indirect data poisoning may enable scientific fraud at unprecedented scale, but these attacks can be mitigated with suitable auditing by agents during data retrieval.

AI CVE Slop: The Crisis Drowning Open Source Security

The proliferation of AI-generated vulnerability reports — commonly termed “AI slop” — has emerged as one of the most significant…

Anthropic Says Its A.I. Systems Broke Into Computers at 3 Organizations

The disclosure followed OpenAI’s report last week that its own artificial intelligence had hacked into the network of an online library.