Data Marketplaces & Intermediaries

Mercor's ARR surge to $2B shadowed by a breach and a Meta pause

Source: TechBuzz · Sep 13, 2026

Mercor's headline number is striking on its own: annualized revenue has doubled to $2 billion in four months, and the company is reportedly negotiating a new round at a $20 billion valuation. But the growth story now sits alongside a real trust problem — a March 2026 breach exposed tens of thousands of contractors' personal data along with source code and API keys, and Meta responded by pausing its cooperation with Mercor indefinitely.

That pause matters more than a single lost contract would. Mercor's own revenue is heavily concentrated: 91% comes from a handful of foundation model labs, meaning any one major customer's confidence directly moves the business. A breach serious enough to make Meta walk away, even temporarily, is exactly the kind of event that tests whether a data vendor's growth is durable or just reflects a moment when buyers hadn't yet had a reason to look closely at security practices.

It's also a live example of the gap between claiming provenance and compliance versus being able to demonstrate it under scrutiny. A breach exposing contractor PII and credentials is a security failure first, but it inevitably raises the same due-diligence questions buyers are increasingly asking about data lineage, access controls, and who actually touched a given record before it reached a customer's training pipeline.

Key Points

• Annualized revenue doubled to $2B in four months; reportedly negotiating a new round at a $20B valuation
• A March 2026 breach exposed tens of thousands of contractors' data plus source code and API keys
• Meta paused its cooperation with Mercor indefinitely in response to the breach
• 91% of revenue comes from foundation labs (OpenAI, Anthropic) — heavy customer concentration risk