Mercor's Troubled Month: A $10B Valuation at Risk

A six-month high for Mercor, a $10 billion valued AI data training startup, has turned into a world of trouble after the company admitted to a data breach on March 31. The breach, which reportedly resulted in the theft of 4TB of data, including candidate profiles, personally identifiable information, employer data, source code, and API keys, has had far-reaching consequences.

Meta Pauses Contracts, Lawsuits Loom

Meta has paused its contracts with Mercor indefinitely, sources told Wired. This move comes as a result of the breach, which not only compromised user data but also potentially exposed sensitive trade secrets belonging to Meta's competitors. While Mercor has not commented on the authenticity of the stolen data, the company is reiterating its commitment to investigating the breach and communicating with its customers and contractors directly.

The fallout from the breach is expected to be significant, with Mercor reportedly on pace to hit over $1 billion in annualized revenue earlier this year. If the company's relationships with its clients continue to suffer, a substantial loss of revenue could be on the horizon.

• Mercor's contractors have filed five lawsuits over their alleged personal data exposure, with one lawsuit naming LiteLLM and Delve as defendants.
• LiteLLM, the open-source tool used by Mercor, was hacked for 40 minutes, allowing credential harvesting malware to steal login credentials.
• Mercor was not a Delve customer, but the company's use of LiteLLM has raised concerns about the security of its systems.

Delve's Troubled Past

Delve, the AI compliance startup used by LiteLLM to obtain security certifications, has been accused of faking data for security certifications and using rubber-stamping auditors. Although Delve has denied these allegations, it has been a world of hurt of its own, with Y Combinator severing ties with the company. LiteLLM has since ditched Delve and is working with another AI compliance startup to obtain its security certifications again.

A Rocky Road Ahead

The future of Mercor remains uncertain, with the company's valuation at risk due to the data breach fallout. As the company continues to investigate the breach and communicate with its customers and contractors, it is likely that more lawsuits and contractual issues will arise. The consequences of the breach will be far-reaching, and only time will tell if Mercor can recover from this setback.