Vercel Security Breach via Compromised Third-Party AI Tool

Vercel experienced a security breach after attackers compromised a third-party AI tool, Context.ai, used by one of its employees. The intrusion allowed unauthorized access to the employee’s Google Workspace account, which was then exploited to infiltrate limited internal systems and non-sensitive data. The breach originated from the third-party tool, though no specific technical details, dates, or CVE IDs were disclosed. Vercel confirmed the incident involved only non-sensitive information and restricted internal environments. No further impacts, such as customer data exposure or operational disruptions, were reported.