Vercel Discloses Security Breach from Compromised AI Tool

Mlq.Ai • April 20, 2026

Web infrastructure provider Vercel disclosed a security breach on April 19, 2026, where attackers gained unauthorized access to internal systems through a compromised third-party AI tool, Context.ai, used by an employee. The incident led to the takeover of the employee's Google Workspace account and exposure of non-sensitive environment variables for a limited subset of customers, with no evidence of sensitive data access.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vercel Security Breach Linked to Compromised AI Tool Vercel has confirmed a security breach resulting from unauthorized access to its internal systems, affecting a limited subset of customers. The breach was traced back to a compromised third-party AI tool, Context.ai, which allowed attackers to gain access to a Vercel employee's Google Workspace account. This access enabled the threat actor to view non-sensitive environment variables, although sensitive data remains protected. The hacker group, allegedly linked to ShinyHunters, is reportedly attempting to sell stolen data, including employee records and internal access keys, for $2 million. Vercel has engaged cybersecurity experts, notified law enforcement, and advised affected customers to rotate their credentials. The company continues to investigate the incident and has implemented additional security measures. Current operations remain unaffected, but the incident highlights vulnerabilities associated with third-party integrations. 54 sources 65

Extracted Entities

Vercel Discloses Security Breach from Compromised AI Tool

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Platforms (1)