Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

MERCOR

mercor.com

MERCOR was listed on the Lapsus$ leak site on Mar 31, 2026. Information as of Oct 19, 2026.

Country: United StatesIndustry: Technology
Updated continuously · figures as of Oct 19, 2026
Claimed by
Lapsus$
First listed
Mar 31, 2026
Claims recorded
1

Leak-Site Claim.

Lapsus$Confirmed claim
Posted on the leak site
Mar 31, 2026
Collected by Brandefense
May 31, 2026
Data claimed
Not stated
Leak-site post text, written by the group
This data has been acquired by a private party. No public leak will occur.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
INGKA GROUP
ingka.com
Lapsus$NLNetherlandsRetail205 KB
GITHUB INTERNAL
github.com
Lapsus$USUnited StatesTechnologyNot stated
VODAFONE
vodafone.com
Lapsus$GBUnited KingdomTelecommunicationsNot stated
MAPFRE ASSURANCE
mapfre.com
Lapsus$ESSpainFinancial ServicesNot stated
CHECKMARX
checkmarx.com
Lapsus$USUnited StatesTechnologyNot stated
VirtaHealth
virtahealth.com
Lapsus$USUnited StatesHealthcareNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
PingCAP / TiDB Cloud
pingcap.com
FulcrumsecUSUnited StatesTechnologyNot stated
Amagi Media Labs
amagi.com
N0nINIndiaTechnologyNot stated
All Business Technologies (Fox Hill bookkeeping and tax practice)
allbusinesstechnologies.com
N0nUSUnited StatesTechnologyNot stated
Southwire
southwire.com
HelixUSUnited StatesTechnologyNot stated
Bay Alarm
bayalarm.com
HelixUSUnited StatesTechnologyNot stated
Taekwang Network
tkni.co.kr
EverestKRSouth KoreaTechnologyNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.