logo

Vercel Confirms Major Security Incident as Hacker Claims $2M Ransom Demand

ID: b0509360-d791-5b74-9630-d81cb5741dce

STIX ID: report--b0509360-d791-5b74-9630-d81cb5741dce

Feed Name: TechRepublic Security

Threat Score
65/100

Date Published: 2026-04-20

Date Updated: 2026-04-23

Author: Ken Underhill

...
...

Vercel confirmed unauthorized access to internal systems after a threat actor — claiming ties to ShinyHunters — posted a purported sample of stolen data and offered company data (API keys, tokens, employee records) for sale; the breach could expose CI/CD pipelines, credentials, and deployments if verified, though the shared evidence remains unconfirmed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.