Vercel Breach Linked to Context.ai, ShinyHunters Says It’s Not Involved

Vercel confirmed a security incident stemming from a third-party compromise at Context.ai where a Google Workspace account was abused via OAuth to access limited Vercel resources (employee information, internal logs, and some environment variables). A threat actor advertised alleged stolen data on BreachForums under the name ShinyHunters (later denied by the real group), Hudson Rock researchers suggested a possible Lumma infostealer infection on a Context.ai employee device, and Vercel has engaged incident response teams and advised credential rotation while investigations continue.