The lapsus$ ransomware group listed MERCOR on its data leak site on 2026-05-31. Claim as published on the leak site: This data has been acquired by a private party. No public leak will occur.