Case Nº MC-2026-0416Public record · Always free
§ About

A public record of what is known — and not known — about the Mercor data breach.

Active · April 2026
Public Record

Everythingwe know aboutthe Mercor breach.

A public record of what we know — and don’t know — about the Mercor data breach. Pulled from court filings, press reports, and notification emails, and written so anyone can read the record and judge for themselves.
StatusActive
AccessPublic
RateFree
01
0%
Always free
02
Nil
Ties to Mercor
03
0/7
Monitored & updated
Public recordCompiled from open sourcesAlways freeFor information onlyPublic recordCompiled from open sourcesAlways freeFor information onlyPublic recordCompiled from open sourcesAlways freeFor information only
Part 01

§ What we track

What we
keep track of.

Four sections, each built on public sources, each designed to let you read the record rather than a summary of it.

Part 02

§ Protect yourself

Protect
yourself,
now.

Five things to do if you think you were exposed — none need a lawyer, and all of them are reversible.

Good Advice
  1. § 01

    Watch every account.

    Monitor financial, email, and cloud accounts for unfamiliar logins or transactions.

  2. § 02

    Presume phishing.

    Unexpected calls, texts, or messages ‘about the breach’ should be treated as suspect.

  3. § 03

    Re-key your life.

    Rotate any shared or reused password. One secret per service — no exceptions.

  4. § 04

    Turn on 2FA.

    Prefer an authenticator app or hardware key over SMS wherever the option exists.

  5. § 05

    Consider a freeze.

    A credit freeze or fraud alert is free and reversible, and closes the fastest doors.

Part 03 — Get email updates

Get updates by email.

Enter your email and we’ll let you know when there’s news — the day the archive opens, and any time the record changes after that.

>> Sent over an encrypted connection— end of form —

No ads · We never sell your email · Unsubscribe anytime

Part 04

§ Questions

Questions,
answered plainly.

What MercorClaims is, what it is not, and what it can — and can’t — do on your behalf.

¶ Answer

According to publicly available reports, Mercor experienced a security incident that may have exposed personal information of users on their platform. We aggregate and present this public information in one place.

¶ Answer

Check for any official notification from Mercor — companies are typically required to notify affected individuals. Our platform will help aggregate publicly available information about who may have been affected.

¶ Answer

No. MercorClaims publishes general information only — this is not legal advice. We are not a law firm. For advice on the breach or potential claims, please consult a qualified attorney.

Part 05

§ Engine

Ask anything,
powered by InstaLaw.

When you ask a question, AI drafts a first answer and a licensed attorney reviews it, corrects the errors, and signs the version you read. No name, no email, no account. It runs on InstaLaw — a zero-knowledge legal platform built so a breach of the platform can’t give anyone your identity.

Clause № 01
InstaLaw
01

Anonymous by default.

No identifying information is required to ask.

Passphrase-based access. No email, phone, or name. If you are never identified, you cannot later be named.

Clause № 02
InstaLaw
02

Encrypted on your device.

Messages are ciphertext before they leave the browser.

Personal data is stripped on the client; the server stores ciphertext and coarsened timestamps — no plaintext, no keys.

Clause № 03
InstaLaw
03

Attorneys verify the answer.

A licensed lawyer reviews every response.

AI drafts the first pass. A verified attorney corrects, signs, and publishes the answer. You always see who the words came from.

“We cannot betray what we cannot access.”

— InstaLaw, architectural first principle

A Mercor claim is a sensitive thing to ask about. You shouldn’t have to hand over your identity to a platform just to understand where you stand. This is built on InstaLaw so the record you read doesn’t, in turn, create a record of you.

§ Verify

Trust isn’t a security model. Open the browser developer console and watch: personal data is stripped on your device, payloads leave as ciphertext, and the canary — a signed statement that no secret disclosure orders have been received — is published in the open.

Read more about InstaLaw →