Vercel identifies more accounts 'with evidence of prior compromise' exposed during security incident

A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.

• Vercel expanded its breach investigation, confirming more compromised accounts than initially reported.
• Researchers linked the attack to a Context.ai account infected with Lumma Stealer malware, which was used to access Vercel environments.
• A dark web actor attempted to sell stolen Vercel data, claiming ties to ShinyHunters, though the group denied involvement.

The number of customers affected by the recent breach at Vercel is bigger than initially thought, as the company confirmed finding even more compromised accounts.