Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

Vercel disclosed a supply-chain-related breach stemming from a compromised Context.ai employee account, which the attacker used to take over the employee's Vercel Google Workspace access and retrieve certain non-sensitive environment variables and customer credentials; a subset of customers had credentials compromised and ShinyHunters claimed to be selling the stolen data. Hudson Rock reported the Context.ai employee was infected with Lumma Stealer, suggesting the initial compromise led to escalation; Vercel is working with Mandiant and others, advising admins to check a specific OAuth application and rotate credentials as needed.