Vercel Confirms Data Breach — Hackers Claim Access to Internal Systems

Vercel disclosed an April 2026 security incident in which attackers abused a compromised Context.ai Google Workspace OAuth app to access an employee account, pivot into select Vercel environments, and read non-sensitive environment variables and employee records; an actor claiming to be ShinyHunters is offering the alleged data and access for $2 million. Vercel has engaged Mandiant, notified law enforcement, confirmed sensitive variables marked as protected were not accessed, and is urging customers to rotate keys, audit Google Workspace for the identified OAuth client ID, and enable sensitive environment protections.