A security incident at Vercel has raised concerns after unauthorized access was gained to internal systems. The breach originated from a third-party AI tool, Context.ai, utilized by a Vercel employee, which led to the compromise of that employee's Google Workspace account.
The attacker, described as "sophisticated" due to their deep understanding of Vercel's operations, managed to access certain environments and environment variables not classified as sensitive. However, Vercel has stated that sensitive data remains secure, as those variables are encrypted and there is no current evidence of their exposure. Affected customers have been contacted directly, with a prompt to change their credentials.
In collaboration with cybersecurity firms, including Mandiant, Vercel is investigating the breach and has notified law enforcement. As a precaution, the company has recommended that Google Workspace users review their activity logs and audit any environment variables for potential vulnerabilities. Additionally, a hacker group known as ShinyHunters has reportedly claimed responsibility for the breach, offering stolen data for $2 million.