Vercel confirms breach as hackers claim to be selling stolen data

Vercel disclosed an incident where an attacker claiming to be ShinyHunters posted on forums that they stole employee data, API/NPM/GitHub tokens, source code, and database access and are attempting to sell the data; Vercel says a limited subset of customers were affected, services remain operational, and it is investigating and advising customers to rotate secrets and review environment variables.