Skip to content
Submit incident
AII-1000-72351
AllegedThe record is a lawsuit, complaint or accusation that has not been decided.Supporting sources are pending verification.

Mercor Faces Lawsuits Over Data Breach Exposing Contractor Information

Mercor, an AI startup that supplies training data to companies like OpenAI and Meta, reportedly suffered a third-party data breach exposing contractor information including interviews and facial scans. At least seven class-action lawsuits have been filed alleging the company collected sensitive data improperly, monitored workers' computers, and used recorded interviews to train AI models without disclosure.

23 April 2026 Β· Mercor Β· Privacy and surveillance
23 April 2026
AII-1000-72351
Quick facts
Category
Privacy and surveillance
Country
United States
Date
23 April 2026
Drafted by
Raidu Incident Detection

What happened

A third-party data breach exposed sensitive information of Mercor contractors, including recorded job interviews, facial scans, and screenshots of workers' private computer screens.

At least seven class-action lawsuits were filed against Mercor following the breach, with plaintiffs alleging the company engaged in practices beyond standard hiring processes.

Reported impact

The lawsuits claim Mercor collected and shared applicant data including background checks with partners in ways that may violate federal regulations.

According to one account cited in the lawsuit, workers were encouraged to use real company data in tasks provided it was slightly altered or anonymised, and faced pushback from reviewers when trying to avoid including sensitive details.

Index analysis

Mercor hires contractors to provide feedback that helps train AI models for companies including OpenAI, Anthropic and Meta.

Plaintiffs allege the company monitored contractors' computers, used recorded candidate interviews to train AI models without proper disclosure, and may have trained client systems on materials owned by other companies.

Governance controls

In a public statement, Mercor disputed the allegations as speculative and said they comply with all relevant laws.

Classification

Category
Privacy and surveillance
Industry
IT infrastructure and hosting
Country
United States
Harm status
Actual harm
Intent
Unknown
Timing
Unknown
Harm types
Human or fundamental rights
Harmed
Workers
Failure modes
Data leak, Training data misuse
Consequences
Litigation
AI systems
Mercor AI training system

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident