{"id":23975,"date":"2026-09-03T18:09:32","date_gmt":"2026-09-03T10:09:32","guid":{"rendered":"https:\/\/www.sesdvt.com\/?p=23975"},"modified":"2026-09-16T16:41:25","modified_gmt":"2026-09-16T08:41:25","slug":"4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain","status":"publish","type":"post","link":"https:\/\/www.sesdvt.com\/en\/4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain\/","title":{"rendered":"4TB of Data Leaked Overnight: How Did an AI Recruitment Startup Valued at 10 Billion Get Compromised by a Compromised Supply Chain?"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/section>
\n

A Look Back at the Incident: 4 TB of Data Leaked onto the Dark Web Overnight<\/h4>\n<\/section>\nMercor\u2019s core business is connecting experts in various fields\u2014such as doctors, lawyers, and engineers\u2014to provide \u201chuman feedback\u201d to leading AI companies\u2014that is, data annotation, evaluation, and RLHF (reinforcement learning from human feedback) tasks required for training models. It claims to have a network of over 300,000<\/b>A professional network where contractors are paid up to $1.5 million<\/b>. This means that its servers are filled with the very things other AI companies are most reluctant to have leaked: training instructions, fine-tuning strategies, evaluation metrics, and the identities and biometric data of tens of thousands of experts.<\/span><\/p>\n

On March 24, 2026, Mercor was compromised after installing an open-source package that had been tampered with. By the end of March, the hacker group LAPSUS$<\/b> Posted their haul on their own leak site, claiming to have stolen approximately 4 TB<\/b> data, and released some samples. According to a cross-check by cybersecurity firms and court documents, this data is broadly divided into three categories:<\/span><\/p>\n\n

    \n \t
  • 939GB Platform Source Code<\/b>: Includes Mercor\u2019s core matching algorithm, internal dashboard, evaluation tools, and embedded API keys and service credentials;<\/span><\/li>\n<\/ul>\n
      \n \t
    • 211 GB User Database<\/b>: More than 40,000<\/b>The contractor's name, email address, work history, Social Security number (SSN), and contact information;<\/span><\/li>\n<\/ul>\n
        \n \t
      • A storage bucket of nearly 3 TB<\/b>: Thousands of hours of video interview recordings, copies of passports and driver's licenses, as well as facial and voice biometric data, etc.Biometric Characteristics<\/b>\u3002<\/span><\/li>\n<\/ul>\n

        What has the cybersecurity community most concerned is the combination of \u201cvideo interviews and ID documents.\u201d These recordings document how real people solve problems and respond to professional scenarios. If leaked, this content could not only be used to impersonate others or apply for loans, but could also be reverse-engineered to reveal the training methods commissioned by OpenAI and Meta\u2014a \u201ctrade secret\u201d worth billions of dollars.<\/span><\/p>\n

        Meta's response was the most immediate: it announced right away that it was suspending all cooperation with Mercor indefinitely.<\/b>. OpenAI said it is investigating the extent of its exposure, while Anthropic has remained silent. As for Mercor itself, it did not publicly confirm the hack until March 31, but delayed June 25<\/b>The company has just submitted a data breach notification to the California Attorney General\u2014a full three months late\u2014and is now facing questions about whether it may have violated reporting obligations under state and federal law.<\/span><\/p>\n

        As of now, there have been at least 7 cases<\/b>A class-action lawsuit has been filed against Mercor, alleging basic lapses such as \u201cfailing to enable multi-factor authentication (MFA)\u201d and \u201cfailing to encrypt at-rest data.\u201d Mercor is offering affected individuals 24 months of free credit monitoring as compensation.<\/span><\/p>\n

        Analysis of the Causes: The real problem does not lie with Mercor itself<\/b><\/span><\/p>\n

        The most ironic\u2014and most alarming\u2014aspect of this incident is that\u2014The hackers didn't launch a direct attack on Mercor at all.<\/b>\u3002<\/span><\/p>\n

        The attack originated from an open-source AI gateway library used by Mercor. LiteLLM<\/b>. Hacker group TeamPCP<\/b> First, they hacked an open-source vulnerability scanner Trivy<\/b>(Produced by Aqua Security), the attackers stole the CI\/CD release credentials, then followed the trail to obtain the PyPI credentials of the LiteLLM maintainer, and finally released two versions containing backdoors on March 24. Mercor\u2019s automated processes unwittingly introduced this \u201cpoisoned seed\u201d into its own environment.<\/span><\/p>\n

        As soon as the backdoor is executed, it immediately scans for various credentials in the environment variables, allowing the attacker to gain access to Mercor's Tailscale VPN<\/b> Full control\u2014equivalent to obtaining a \u201cgolden ticket\u201d that allows the attacker to masquerade as a trusted internal machine. From that point on, the entire internal network map, backend systems, and source code repositories are laid bare before the attacker.<\/span><\/p>\n

        The entire chain reveals a brutal division of labor:TeamPCP is in charge of \"breaking in,\" while LAPSUS$ is in charge of \"carrying the loot and showing it off.\"<\/b>. And Mercor is just the most prominent company to be affected along this supply chain.<\/span><\/p>\n

        Prevention Tips: Treat \"Suppliers\" as Your Own Security Perimeter<\/b><\/span><\/p>\n

        Lessons for Businesses<\/b>...goes far deeper than a single event:<\/span><\/p>\n\n

          \n \t
        1. Treat third-party software as part of your own attack surface<\/b>: The vulnerability in Mercor originated from an external library. Organizations must create a \u201csoftware bill of materials\u201d (SBOM) for open-source packages, pin versions, enable supply chain scanning, and perform integrity checks on any automatic package upgrades.<\/span><\/li>\n<\/ol>\n
            \n \t
          1. Minimize Outsourced Data<\/b>: AI companies frequently outsource large volumes of training data, annotation processes, and fine-tuning methods to vendors, yet often fail to implement safeguards regarding those vendors\u2019 information security standards. It is essential to provide only \u201cthe minimum amount of data necessary to complete the task\u201d and to clearly stipulate data classification and destruction obligations in the contract.<\/span><\/li>\n<\/ol>\n
              \n \t
            1. Enable the most basic line of defense<\/b>: MFA, static data encryption, centralized key management\u2014these \u201cbasic measures\u201d cited in the lawsuit are precisely the steps most often overlooked by fast-growing startups.<\/span><\/li>\n<\/ol>\n
                \n \t
              1. Reports Should Not Be Delayed<\/b>: Failing to issue a public notice until three months after a data breach occurs will only exacerbate legal and reputational risks. Establishing a clear timeline for reporting cybersecurity incidents is the final safeguard for compliance.<\/span><\/li>\n<\/ol>\n

                Reminders for Individuals<\/b>To put it more simply: If you\u2019ve ever taken on freelance work through platforms like Mercor, uploaded a copy of your passport, or recorded a video interview, be sure to watch closely for signs of identity theft, freeze any unnecessary credit inquiries, and be on the lookout for any unknown calls or text messages claiming to be \u201cverifying your identity.\u201d<\/span><\/p>\n

                Conclusion<\/b><\/span><\/p>\n

                The story of Mercor is the perfect illustration of how the AI security landscape shifted in 2026: as the most valuable assets shifted from \u201ccode\u201d to \u201cdata and methodology,\u201d risks expanded from \u201cbehind the company\u2019s firewall\u201d to \u201cthe entire supply chain.\u201d A company that helped AI giants vet talent ultimately became the very vulnerability through which their trade secrets were leaked.<\/span><\/p>\n

                Before you hand over your core data to any partner, ask yourself: Is the supply chain behind it truly secure?<\/b><\/span><\/p>\n

                References<\/b><\/span><\/p>\n\n

                  \n \t
                • Cybernews: \u201cHackers Claim to Have Stolen 4TB of Data from an AI Firm Serving OpenAI, Google, and Meta\u201d<\/span><\/li>\n<\/ul>\n
                    \n \t
                  • Cyber Security News: \u201cMercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft\u201d<\/span><\/li>\n<\/ul>\n
                      \n \t
                    • Almeida Law Group: \u201cMercor.io Corporation Data Breach Investigation\u201d<\/span><\/li>\n<\/ul>\n
                        \n \t
                      • PR Newswire: \u201cPRIVACY ALERT: Mercor.io Corporation Under Investigation for Data Breach\u201d<\/span><\/li>\n<\/ul>\n
                          \n \t
                        • TechStartups: \u201cMercor Confirms Breach in LiteLLM Supply-Chain Attack, Exposing 4TB of Candidate Data and Source Code\u201d<\/span><\/li>\n<\/ul>\nLeveraging Digital Vaults to Strengthen AI Supply Chain and Confidentiality Security Defenses<\/b><\/blockquote>\n

                          In the age of artificial intelligence, cybersecurity can no longer focus solely on internally developed systems. Every library, software package, SDK, model provider, plugin, and third-party service related to development and the AI ecosystem has the potential to become part of an organization\u2019s attack surface.<\/p>\n

                          Digital Vault<\/b> Committed to providing full-lifecycleSecret Management, Dynamic Key Rotation, and AI Supply Chain Risk Management<\/b><\/p>\n

                          Before risks are exploited as attack vectors, understand them and, through Digital Vault<\/b> Strengthen the security of your digital and AI supply chains.<\/p>\nContact us:<\/strong>www.sest.com.hk | info@sest.com.hk\n\n\"\"\n\n<\/section><\/div>\n

                          \n\n
                          \n\nDVT Digital Vault - Over 20 years of chip-level encryption technology to accumulate data sovereignty, starting now.\n\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                          \n\t\t\t\t\t
                          \n\t\t\t\t
                          \n\t\t\t\t\t\t\t
                          \n\t\t\t
                          <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                          A company you\u2019ve probably never heard of\u2014but one that may have \u201cindirectly fueled\u201d the AI products you use every day\u2014became the latest target for hackers to boast about their exploits in March 2026. Its name is Mercor\u2014an AI recruitment and data annotation startup valued at $10 billion, with a client list that includes OpenAI, Google, Meta, Microsoft, and Anthropic. What it lost was approximately 4 TB of sensitive data\u2014a breach that affects not only the company itself but also the \u201cmethodological lifeline\u201d of the entire AI industry.<\/p>","protected":false},"author":1,"featured_media":23985,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[],"class_list":["post-23975","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-useful-articles"],"yoast_head":"\n4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f - \u6578\u5b57\u91d1\u5eab DVT<\/title>\n<meta name=\"description\" content=\"2026 \u5e74 3 \u6708 24 \u65e5\uff0cMercor \u56e0\u5b89\u88dd\u4e86\u4e00\u689d\u88ab\u52d5\u904e\u624b\u8173\u7684\u958b\u6e90\u5957\u4ef6\u800c\u906d\u5230\u5165\u4fb5\u3002\u5230\u4e86 3 \u6708\u5e95\uff0c\u99ed\u5ba2\u96c6\u5718 LAPSUS$ \u5728\u81ea\u5bb6\u6d29\u5bc6\u7db2\u7ad9\u4e0a\u8cbc\u51fa\u6230\u679c\uff0c\u5ba3\u7a31\u5f9e Mercor \u7aca\u8d70\u7d04 4TB \u8cc7\u6599\u2026\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sesdvt.com\/en\/4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f - \u6578\u5b57\u91d1\u5eab DVT\" \/>\n<meta property=\"og:description\" content=\"2026 \u5e74 3 \u6708 24 \u65e5\uff0cMercor \u56e0\u5b89\u88dd\u4e86\u4e00\u689d\u88ab\u52d5\u904e\u624b\u8173\u7684\u958b\u6e90\u5957\u4ef6\u800c\u906d\u5230\u5165\u4fb5\u3002\u5230\u4e86 3 \u6708\u5e95\uff0c\u99ed\u5ba2\u96c6\u5718 LAPSUS$ \u5728\u81ea\u5bb6\u6d29\u5bc6\u7db2\u7ad9\u4e0a\u8cbc\u51fa\u6230\u679c\uff0c\u5ba3\u7a31\u5f9e Mercor \u7aca\u8d70\u7d04 4TB \u8cc7\u6599\u2026\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sesdvt.com\/en\/4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain\/\" \/>\n<meta property=\"og:site_name\" content=\"\u6578\u5b57\u91d1\u5eab\uff0c\u8b93\u5b58\u5132\u7522\u751f\u50f9\u503c\uff0c\u8b93\u6578\u64da\u5275\u9020\u6536\u76ca\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-03T10:09:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T08:41:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"827\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#\\\/schema\\\/person\\\/d3677aa4a84813d09e61acb5a738a22b\"},\"headline\":\"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f\",\"datePublished\":\"2026-09-03T10:09:32+00:00\",\"dateModified\":\"2026-09-16T08:41:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/\"},\"wordCount\":136,\"publisher\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.sesdvt.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg\",\"articleSection\":[\"\u65b0\u95fb\u52a8\u6001\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/\",\"url\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/\",\"name\":\"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f - \u6578\u5b57\u91d1\u5eab DVT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.sesdvt.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg\",\"datePublished\":\"2026-09-03T10:09:32+00:00\",\"dateModified\":\"2026-09-16T08:41:25+00:00\",\"description\":\"2026 \u5e74 3 \u6708 24 \u65e5\uff0cMercor \u56e0\u5b89\u88dd\u4e86\u4e00\u689d\u88ab\u52d5\u904e\u624b\u8173\u7684\u958b\u6e90\u5957\u4ef6\u800c\u906d\u5230\u5165\u4fb5\u3002\u5230\u4e86 3 \u6708\u5e95\uff0c\u99ed\u5ba2\u96c6\u5718 LAPSUS$ \u5728\u81ea\u5bb6\u6d29\u5bc6\u7db2\u7ad9\u4e0a\u8cbc\u51fa\u6230\u679c\uff0c\u5ba3\u7a31\u5f9e Mercor \u7aca\u8d70\u7d04 4TB \u8cc7\u6599\u2026\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.sesdvt.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg\",\"contentUrl\":\"https:\\\/\\\/www.sesdvt.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg\",\"width\":1536,\"height\":827},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.sesdvt.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#website\",\"url\":\"https:\\\/\\\/www.sesdvt.com\\\/\",\"name\":\"\u6578\u5b57\u91d1\u5eab DVT\",\"description\":\"\u91cd\u69cb\u6578\u64da\u4e3b\u6b0a \u5be6\u73fe\u6578\u5b57\u8cc7\u7522\u50f9\u503c\u5316\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#organization\"},\"alternateName\":\"Digital Vault DVT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.sesdvt.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#organization\",\"name\":\"Secure Encryption Storage Limited\",\"alternateName\":\"SES\",\"url\":\"https:\\\/\\\/www.sesdvt.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":null,\"contentUrl\":null,\"width\":246,\"height\":50,\"caption\":\"Secure Encryption Storage Limited\"},\"image\":{\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.sesdvt.com\\\/#\\\/schema\\\/person\\\/d3677aa4a84813d09e61acb5a738a22b\",\"name\":\"admin\",\"sameAs\":[\"https:\\\/\\\/www.sesdvt.com\"],\"url\":\"https:\\\/\\\/www.sesdvt.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"4TB of Data Leaked Overnight: How Did an AI Recruitment Startup Valued at 10 Billion Get Compromised by a Compromised Supply Chain? - Digital Vault DVT","description":"Explore the Mercor incident discussed in this article and the data protection risks associated with AI software supply chains.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sesdvt.com\/en\/4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain\/","og_locale":"en_US","og_type":"article","og_title":"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f - \u6578\u5b57\u91d1\u5eab DVT","og_description":"2026 \u5e74 3 \u6708 24 \u65e5\uff0cMercor \u56e0\u5b89\u88dd\u4e86\u4e00\u689d\u88ab\u52d5\u904e\u624b\u8173\u7684\u958b\u6e90\u5957\u4ef6\u800c\u906d\u5230\u5165\u4fb5\u3002\u5230\u4e86 3 \u6708\u5e95\uff0c\u99ed\u5ba2\u96c6\u5718 LAPSUS$ \u5728\u81ea\u5bb6\u6d29\u5bc6\u7db2\u7ad9\u4e0a\u8cbc\u51fa\u6230\u679c\uff0c\u5ba3\u7a31\u5f9e Mercor \u7aca\u8d70\u7d04 4TB \u8cc7\u6599\u2026","og_url":"https:\/\/www.sesdvt.com\/en\/4-tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startups-efforts-to-recruit-new-talent-were-disrupted-by-a-toxic-supply-chain\/","og_site_name":"\u6578\u5b57\u91d1\u5eab\uff0c\u8b93\u5b58\u5132\u7522\u751f\u50f9\u503c\uff0c\u8b93\u6578\u64da\u5275\u9020\u6536\u76ca","article_published_time":"2026-09-03T10:09:32+00:00","article_modified_time":"2026-09-16T08:41:25+00:00","og_image":[{"width":1536,"height":827,"url":"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#article","isPartOf":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/"},"author":{"name":"admin","@id":"https:\/\/www.sesdvt.com\/#\/schema\/person\/d3677aa4a84813d09e61acb5a738a22b"},"headline":"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f","datePublished":"2026-09-03T10:09:32+00:00","dateModified":"2026-09-16T08:41:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/"},"wordCount":136,"publisher":{"@id":"https:\/\/www.sesdvt.com\/#organization"},"image":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg","articleSection":["\u65b0\u95fb\u52a8\u6001"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/","url":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/","name":"4TB of Data Leaked Overnight: How Did an AI Recruitment Startup Valued at 10 Billion Get Compromised by a Compromised Supply Chain? - Digital Vault DVT","isPartOf":{"@id":"https:\/\/www.sesdvt.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#primaryimage"},"image":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg","datePublished":"2026-09-03T10:09:32+00:00","dateModified":"2026-09-16T08:41:25+00:00","description":"Explore the Mercor incident discussed in this article and the data protection risks associated with AI software supply chains.","breadcrumb":{"@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#primaryimage","url":"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg","contentUrl":"https:\/\/www.sesdvt.com\/wp-content\/uploads\/2026\/09\/A_conceptual_3D_illustration_f_2026-09-03T09-53-30_\u526f\u672c.jpg","width":1536,"height":827},{"@type":"BreadcrumbList","@id":"https:\/\/www.sesdvt.com\/4tb-of-data-leaked-overnight-how-a-multi-billion-dollar-ai-startup-recruiting-new-talent-was-disrupted-by-a-toxic-supply-chain\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sesdvt.com\/"},{"@type":"ListItem","position":2,"name":"4TB \u8cc7\u6599\u4e00\u591c\u5916\u6d41\uff1a\u4f30\u503c\u767e\u5104\u7684 AI \u62db\u52df\u65b0\u5275\uff0c\u5982\u4f55\u88ab\u4e00\u689d\u4f9b\u61c9\u93c8\u6bd2\u93c8\u6253\u7a7f"}]},{"@type":"WebSite","@id":"https:\/\/www.sesdvt.com\/#website","url":"https:\/\/www.sesdvt.com\/","name":"Digital Vault DVT","description":"Reconstructing Data Ownership to Realize Digital Asset Valorization","publisher":{"@id":"https:\/\/www.sesdvt.com\/#organization"},"alternateName":"Digital Vault DVT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sesdvt.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.sesdvt.com\/#organization","name":"Secure Encryption Storage Limited","alternateName":"SES","url":"https:\/\/www.sesdvt.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sesdvt.com\/#\/schema\/logo\/image\/","url":null,"contentUrl":null,"width":246,"height":50,"caption":"Secure Encryption Storage Limited"},"image":{"@id":"https:\/\/www.sesdvt.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.sesdvt.com\/#\/schema\/person\/d3677aa4a84813d09e61acb5a738a22b","name":"admin","sameAs":["https:\/\/www.sesdvt.com"],"url":"https:\/\/www.sesdvt.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/posts\/23975","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/comments?post=23975"}],"version-history":[{"count":9,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/posts\/23975\/revisions"}],"predecessor-version":[{"id":23984,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/posts\/23975\/revisions\/23984"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/media\/23985"}],"wp:attachment":[{"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/media?parent=23975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/categories?post=23975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sesdvt.com\/en\/wp-json\/wp\/v2\/tags?post=23975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}