Mercor: The $20 Billion Machine Feeding Frontier AI
Mercor got sued, hacked, and infiltrated by North Korean operatives—and investors are queuing up to write checks at a $20 billion valuation. That is double what the company was worth just nine months ago.
Nothing has slowed it down.
In 2023, three high school debate teammates from Bellarmine College Prep in San Jose—Brendan Foody, Adarsh Hiremath, and Surya Midha—launched
Mercor doesn’t build AI models; it feeds them.
Every frontier model relies on human feedback and rigorous evaluation. Lawyers verify legal reasoning, physicians check medical answers, and software engineers validate complex code. Mercor built the global talent marketplace supplying these domain experts—a network scaling past 5 million contractors.
Today, the leading names in artificial intelligence—including OpenAI, Anthropic, and Meta—depend on Mercor's platform to power their training pipelines.
February 2025: $2B Valuation
October 2025: $10B Valuation
July 2026: $20B Valuation (in talks)
The financial trajectory matches the valuation trajectory. Annualized revenue crossed $1 billion in February 2026 and doubled to $2 billion by June. (Though after contractor payouts, net revenue is estimated closer to $600M–$800M).
Corporate Espionage and Security Fallout
While Mercor’s numbers surged, so did its liabilities.
1. The Scale AI Lawsuit
In September 2025, rival data-labeling giant Scale AI filed a lawsuit against Mercor and former Scale employee Eugene Ling. According to the complaint filed in federal court, Ling downloaded more than 100 confidential documents—including strategic client playbooks—before leaving Scale. The lawsuit alleges Ling met with Mercor CEO Brendan Foody while still employed at Scale and actively pitched a major client to switch over. Mercor co-founder Surya Midha stated the company was investigating and denied using any trade secrets.
2. The LiteLLM Supply Chain Attack
Six months later, in March 2026, a supply-chain attack struck Mercor through a compromised open-source dependency called LiteLLM. Malicious packages exfiltrated system credentials, allowing attackers to move laterally and extract roughly 4 terabytes of internal data. Stolen records included Social Security numbers, passport scans, and contractor interview footage. Threat actor group Lapsus$ subsequently claimed the breach and auctioned the cache on dark web forums. Mercor published a full
3. North Korean Operatives Inside the Pipeline
Security breaches were not the only threat to platform integrity. As reported by Forbes, Mercor employees suspected as early as November 2024 that North Korean operatives were using stolen identities to bypass background checks and secure paid technical work. Internally referred to as "NKs," some of these operatives reportedly produced code that reached training sets for Anthropic models. Former employees noted that these contractors "would work 80 hours a week and produce the cleanest code".
Conflict of Interest or Strategic Expansion?
This month, Mercor executed its first major acquisition: purchasing
The Wrinkle: Mercor CEO Brendan Foody had personally participated as an angel investor in Deeptune's $43 million Series A round—led by Andreessen Horowitz—just four months prior. Foody later candidly noted that his angel check was "in a lot of ways the main motivation, actually," raising eyebrows across Silicon Valley regarding governance and self-dealing.
The Bottom Line
Sued for corporate espionage. Hacked for 4 terabytes of sensitive data. Infiltrated by state-sponsored actors. Anchored by founder conflicts of interest.
Yet in the high-stakes arms race for frontier AI data, supply-side demand remains insatiable—and investors are still writing checks at double the price.
Comments
Post a Comment