Anatomy of Mercor's Data Breach (162 minute read)

Mercor is an AI-powered talent marketplace that connects software engineers, AI data labelers, and knowledge workers with companies seeking contract labor. The company claims it was recently breached due to a supply-chain attack on a popular open source package. However, there are several reasons to doubt that claim. Saying that it was affected by the supply-chain attack may be an attempt to deflect from deeper, embarrassing security failures.