Vercel reported an April 2026 security incident in which unauthorized access occurred to some of its internal systems after a third-party tool was compromised. The attacker used a compromised Context.ai account to access environment variables not marked as sensitive, and the breach was claimed by ShinyHunters. #Vercel #ShinyHunters
Information
- Victim: Vercel April 2026 security incident | Vercel Knowledge Base
- Website: vercel.com
- Country: United States
- Date Reported: 2026-04-19
Keypoints
- Vercel disclosed unauthorized access to certain internal systems.
- The attack began with the compromise of a third-party tool, Context.ai, used by an employee.
- Access allowed exposure of environment variables that were not labeled as sensitive.
- The security incident was claimed by the threat actor group ShinyHunters.
- The incident was reported on 2026-04-19.
- Affected organization: Vercel (vercel.com).
Read More: https://vercel.com/kb/bulletin/vercel-april-2026-security-incident