Vercel Discloses Internal System Breach

A security incident has occurred in which unauthorized access to Vercel's internal systems was confirmed. The current scope of impact is limited to some customers, and external experts have been brought in to investigate the cause and carry out recovery work in parallel.

The root cause of this incident has been identified as the breach of a third-party AI tool's Google Workspace OAuth app. A security flaw in that app may have led to a broader breach, potentially affecting hundreds of users across multiple organizations.

Vercel has recommended the following actions to customers:

• Check activity logs for any suspicious activity
• Rotate environmental variables
• Use the sensitive environment variables feature, which stores items such as API keys in an unreadable format

The exact types of systems breached and the precise scope of damage have not been disclosed, but related identifiers have been included in the IOC and reported to law enforcement.