Vercel Confirms Cyber Incident Involving Sophisticated Attacker

Vercel, a US-based provider of developer tools and cloud infrastructure, confirmed a cyber incident on April 21, 2026, involving a "highly sophisticated" attacker. The unauthorized access originated from an employee’s use of a third-party tool, potentially leading to the exposure of sensitive internal data. The company disclosed the incident in an updated security notice without specifying the exact third-party tool exploited or the full scope of compromised data. No CVE IDs, technical attack vectors, or numerical impact details were provided in the report.