Vercel hit by attack via compromised AI tool

Vercel said the breach began with a compromised Context.ai OAuth app used by an employee.

Attackers then took over the employee’s Google Workspace account and accessed some internal environments and non-sensitive environment variables.

The company says only a limited number of customers were affected and it has not found evidence that sensitive values were read.

Vercel has contacted the impacted customers and is taking follow-up steps such as credential rotation.