Mercor.io Corporation

Mercor.io Corporation notified the New Hampshire Attorney General of a security event involving the LiteLLM supply chain. An unauthorized actor exploited malware in LiteLLM code scanning tools to access Mercor's systems between March 24-30, 2026. The incident affected approximately 68 New Hampshire residents, exposing passport numbers, driver's license numbers, and other government IDs. Mercor engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring via TransUnion.