Lapsus$ Hacks Mercor: 4TB of Biometric Data Leaked

On April 4, 2026, the hacker group Lapsus$ published a dump of approximately 4 terabytes of biometric data stolen from Mercor, a platform widely used to recruit contractors for AI model training. This substantial leak includes voice recordings and personal identification information (DNI) of 40,000 individuals, raising serious concerns about data security and privacy in AI-related projects.

The incident underscores significant vulnerabilities in the security infrastructure surrounding AI training data and points to a broader need for enhanced protective measures. As voice data becomes a critical aspect of authentication in both consumer and enterprise settings, this leak raises questions about national reliance on foreign technology for voice recognition and AI capabilities, possibly increasing security and sovereignty concerns in a rapidly evolving digital landscape.