Ransomware Intelligence

MERCOR

mercor.com

lapsus$Group
United StatesCountry
May 31, 2026Discovered

Data has been published on the ransomware group's leak site.

Domain

mercor.com

Industry

Professional Services

Country

United States

Discovered

25 days ago

Attack date

Mar 31, 2026

Confidence

90%

Severity

Critical

Status

Data Leaked

Threat group

lapsus$

Total victims

25

First seen

Mar 2026

Last seen

Jun 2026

Group status

active

Sophistication

0

Impact score

105

Threat level

2.7/10
Aggressiveness6/10
Lethality0.2/10
Criticality1.9/10

Status breakdown

Data Leaked
this victim
12.0%3
Claimed28.0%7

Victim's position within group

Industry

Professional Services

Known target sector

Country

United States

Frequently targeted country

Group activity

Monthly attacks · lapsus$

25

total · avg 6.3/mo

MarAprMayJun0481216