# Is Mercor legit? A review of its company data program

> Is Mercor legit or a scam for a company licensing its records? A review of its data arm: funding, terms, the March 2026 breach and where the lawsuits stand.

By Matt Burns, Vaultfish. Canonical: https://vaultfish.com/answers/is-mercor-legit  
Published: 2026-08-29  
Updated: 2026-10-14

## The short answer

Mercor is a real, funded company with a published company-data page: no stated minimum, no fees to you and a wire 2 to 4 weeks after signing. A March 2026 breach exposed contractor and applicant data. The class actions were consolidated in May and stayed for mediation in July 2026.

This review covers [Mercor](/buyers/mercor)'s data arm, the program that licenses company records such as Slack, email and CRM history to AI labs. Mercor's expert marketplace is a separate business with its own record. The table is what I would check before handing Mercor an export.

## Is Mercor legit for a company licensing data?

Yes, on the public record. Mercor.io Corporation was founded in 2023, raised a $350M Series C at a $10B valuation in October 2025, and publishes a company data page with its payment terms. No contract for companies is public.

## Is Mercor a scam?

Nothing in the public record points to a scam. Mercor names its entity, its investors and how it pays. Its serious mark is a March 2026 security incident and the lawsuits filed after it, and they concern contractor and applicant data.

## What does the evidence show?

| Item | What the sources show | Source |
|---|---|---|
| Entity | Mercor.io Corporation, founded January 2023. $350M Series C led by Felicis at a $10B valuation, October 2025. Sacra estimates $2B in annualized gross revenue in June 2026 | [Sacra](https://sacra.com/c/mercor/) |
| Terms published | No fees to the company. Wire on delivery of the anonymized dataset, typically 2 to 4 weeks after the signed agreement | [mercor.com/data](https://www.mercor.com/data/) |
| Security claim | SOC 2 Type II, encryption in transit, keys in AWS KMS. Self-reported, with no scope, auditor or period shown | [mercor.com/data](https://www.mercor.com/data/) |
| Reported offers | Offers to shuttered startups reported up to $300,000. A $7.5M bid for Spirit Airlines' archive finished second to Google's $10M | [BigGo](https://finance.biggo.com/news/d34746c0-e437-4855-93c5-09c6e850550d). [Time](https://time.com/article/2026/08/25/google-spirit-airlines-ai-data-RL/) |
| Breach | A poisoned LiteLLM release hit Mercor in March 2026. Its 25 Jun update says the forensic investigation is complete and only "a very limited subset" of nearly five million experts had sensitive data affected | [Mercor update](https://www.mercor.com/blog/update-on-mercor-security-incident/) |
| Breach, as reported | About four terabytes exposed, per The Next Web. Meta paused work and OpenAI said it was investigating | [TNW](https://thenextweb.com/news/meta-mercor-breach-ai-training-secrets-risk) |

More on the incident is in [Mercor data breach](/answers/mercor-data-breach).

## Where does the Mercor class action stand?

The Mercor breach suits in the Northern District of California sit before Judge William H. Orrick, per CourtListener on 14 Oct 2026.

On 19 May 2026 he related *Ananthula v. Mercor.io Corp.* to *Deboni v. Mercor.io Corp.*, No. 3:26-cv-02821, and consolidated them.

On 21 Jul 2026 he granted a joint stipulation to stay the case pending mediation and vacated the case management conference. No later entry appears on the [docket](https://www.courtlistener.com/docket/73129103/deboni-v-mercorio-corporation/). No court has ruled on the claims.

A separate proposed class action, *White v. Mercor.io Corp.* (N.D. Tex.), is about how Mercor classifies its contractors. An amended complaint was filed on 25 Jun 2026. Neither case concerns company archives.

## What did the 17 Aug 2026 report say about Mercor's startup offers?

BigGo reported that Mercor was approaching failed and acquired startups for Slack, GitHub, Drive and meeting records, with offers up to $300,000. Warmly's founder turned Mercor down.

BigGo names no source of its own, and the report describes solicitations. It names no completed deal.

How that route compares with a shutdown service is in [Mercor vs SimpleClosure](/answers/mercor-vs-simpleclosure).

## How does Mercor's data program work for a company?

You pick the tools to share and link the accounts. Mercor names nine, including Slack, Teams, Gmail, Salesforce and GitHub, and says it supports 100+. Its platform extracts and de-identifies the data, and it says no lab or vendor sees the raw records.

Pay depends on data volume, the tools you connect and the depth of the data. Every tool each company names is in the [connector matrix](/answers/ai-data-company-connectors).

## What should a company ask Mercor before signing?

- **The SOC 2 report.** Ask for its scope, auditor and period.
- **What you keep.** Mercor publishes no ownership, term or exclusivity terms for companies.
- **Who receives the data.** The page says AI buyers and names none.

The firms that take the same records on other terms are in [Mercor alternatives](/answers/mercor-alternatives).

Our only referral relationship is with micro1, an AI data company. It may pay us a fee if a company we introduce goes ahead with it. You pay nothing extra. [How we are paid](https://vaultfish.com/disclosure)

Have a lawyer read any contract before you sign. They like that.

_Vaultfish helps you run the process. We are not lawyers and this is not legal advice. If you need counsel who knows this area, we can point you to one._

## Sources

- [Sacra](https://sacra.com/c/mercor/)
- [mercor.com/data](https://www.mercor.com/data/)
- [BigGo](https://finance.biggo.com/news/d34746c0-e437-4855-93c5-09c6e850550d)
- [Time](https://time.com/article/2026/08/25/google-spirit-airlines-ai-data-RL/)
- [Mercor update](https://www.mercor.com/blog/update-on-mercor-security-incident/)
- [TNW](https://thenextweb.com/news/meta-mercor-breach-ai-training-secrets-risk)
- [docket](https://www.courtlistener.com/docket/73129103/deboni-v-mercorio-corporation/)