Update on Mercor Security Incident
Mercor reported a July 27, 2024 security incident where an unauthorized party accessed an employee's computer, potentially copying personal information. The company says production systems, the AI assessment platform, and candidate database were unaffected. Additional security measures have been implemented.
Background
- Mercor is an AI recruiting startup (backed by Peter Thiel/Founders Fund) that uses AI agents to interview candidates and makes hiring recommendations.
- The company suffered a security incident: a former employee's cloned laptop accessed Mercor's internal Slack, then someone inside that Slack sent a mass message telling employees their personal info had been leaked.
- The leaked data reportedly included names, passport and visa details, background check results, and bank account info — highly sensitive for a company that runs background checks on candidates.
- The incident raises questions about Mercor's security practices, as Slack itself logged the breach, but the company's initial response allegedly took 90 minutes and the attacker sent messages from inside the Slack workspace.