Vercel Discloses Breach of Internal Systems

Vercel, a prominent cloud platform for hosting and deploying web applications, disclosed on April 19, 2026, that attackers had gained unauthorized access to certain internal systems, impacting a limited subset of its customers.

The company confirmed the breach in a security bulletin, stating it had detected the incident and was actively investigating with the assistance of incident response experts. Vercel also notified law enforcement authorities. According to the bulletin, the access originated from a compromised third-party AI tool through a Google Workspace OAuth application, which affected hundreds of users across multiple organizations. The platform emphasized that its core services remained operational and unaffected, with no disruptions to customer applications.

Details of the breach surfaced online when a threat actor using the handle associated with the ShinyHunters group posted on the BreachForums hacking site, claiming to sell stolen data for $2 million. The post included a text file with 580 records of Vercel employee information, such as names, email addresses, account statuses, and activity timestamps. It also featured screenshots of internal systems, including...