Vercel Confirms Cyber Incident Involving Third-Party Tool

Vercel, a cloud application development platform, confirmed a cyber incident after a sophisticated threat actor exploited a third-party tool to gain unauthorized access. The attack occurred in early June 2024, though the exact date was not specified, and targeted Vercel’s infrastructure through a compromised vendor system. No customer data or production systems were reported as impacted, but the company acknowledged the breach involved internal administrative tools. Vercel stated it detected and contained the incident promptly, collaborating with external cybersecurity experts to investigate. The specific third-party tool and technical details of the exploit were not disclosed in the report.