Mercor subjected to several breach-related lawsuits

AI staffing company Mercor is facing at least four class-action lawsuits, alleging that the recent exploit of the open-source AI platform interface LiteLLM that affected its systems resulted in damages, according to HR Dive.

According to a case document, the breach resulted in the exfiltration of consumers' and employees' sensitive personal identifiable information. It also led to Meta putting their work with Mercor on pause. Mercor was reportedly one of "thousands" of affected companies that used the breached interface. Plaintiffs allege that the incident led to breach of privacy, breach of implied contract, negligence, unjust enrichment, and violation of California's Unfair Competition Law. They are asking for injunctive relief, compensation for out-of-pocket costs linked to detection, recovery, and prevention from identity theft, unauthorized use of data, and fraud.

While the number of affected individuals has not been disclosed, the independent contractors suing Mercor allege that the putative class consists of at least 100 Mercor clients and employees.