Vercel Incident Linked to AI Tool Hack, Internal Access Gained

Vercel disclosed an incident where attackers leveraged a compromise of a third-party AI tool (Context.ai) to access an employee Google Workspace account and pivot into internal systems, exposing non-sensitive environment variables and a subset of customer credentials. The company says sensitive environment variables remain encrypted with no current evidence of access, has published IOCs, is working with Mandiant and law enforcement, and is advising customers to rotate credentials, audit deployments, and tighten third-party integrations.