Vercel internal systems breached, customer data and credentials leaked
The internal systems of cloud development platform Vercel were breached, leaking customer data and some customer credentials. An external AI tool used by an employee and the Context AI hack were identified as the intrusion path, and a link to malware disguised as Roblox cheats also came to light. Vercel urged customers to rotate API keys and other secrets.
Key facts
- Affected organization
- Vercel
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer data and some customer credentials
- Cause / method
- Access to internal systems via a compromised external AI tool used by an employee
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- As news of the Vercel hack broke, crypto developers moved to secure their API keys.
- The leak of customer data and some credentials and links to an external AI tool and malware were reported, and rotation of API keys and other secrets was recommended.
- ShinyHunters' theft of customer data and a ransom demand of about KRW 2.7 billion were reported.
16 related reports
- Cloud development platform Vercel was hacked
- Hack at Vercel sends crypto developers scrambling to lock down API keys
- 버셀, 내부 시스템 무단 접근 해킹 당해...API키 등 교체 당부
- Vercel, 내부 시스템 침해 발생했다고 밝혀 - GeekNews
- Vercel Employee's AI Tool Access Led to Data Breach
- Vercel’s security breach started with malware disguised as Roblox cheats
- Vercel Breach Originated From an Employee’s AI Tool
- App host Vercel says it was hacked and customer data stolen
- Third-party AI hack triggers Vercel breach, internal environments accessed
- Next.js Creator Vercel Hacked
- Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
- ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More
- 클라우드 개발 플랫폼 ‘버셀’ 해킹 피해…공급망 보안 우려 확산
- “몸값만 27억원”... 샤이니헌터스, Vercel 보안 뚫고 고객 정보 탈취
- ADT, 고객정보 유출 확인…샤이니헌터스 “1,000만 건 탈취” 주장
- 메드트로닉, 해킹 정황 확인…샤이니헌터스 ‘900만 건 탈취’ 주장
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.