Back Feeds2.Feedburner

Vercel breached via compromised third

Feeds2.Feedburner •Zeljka Zorz • April 20, 2026

Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising Vercel credentials of a “limited subset of customers”. Advice for affected customers “The incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee,” the Vercel security team explained in a post published on Sunday. “The attacker used that access to take over the employee’s Vercel Google … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vercel Security Breach Linked to Compromised AI Tool Vercel has confirmed a security breach resulting from unauthorized access to its internal systems, affecting a limited subset of customers. The breach was traced back to a compromised third-party AI tool, Context.ai, which allowed attackers to gain access to a Vercel employee's Google Workspace account. This access enabled the threat actor to view non-sensitive environment variables, although sensitive data remains protected. The hacker group, allegedly linked to ShinyHunters, is reportedly attempting to sell stolen data, including employee records and internal access keys, for $2 million. Vercel has engaged cybersecurity experts, notified law enforcement, and advised affected customers to rotate their credentials. The company continues to investigate the incident and has implemented additional security measures. Current operations remain unaffected, but the incident highlights vulnerabilities associated with third-party integrations. 54 sources 65

Extracted Entities

Vercel breached via compromised third

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Domains (1)

MITRE ATT&CK (1)