Vercel breach started in a third-party AI tool and ended in customers' environment variables

Vercel disclosed that a security incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee. The attacker used that access to take over the employee's individual Google Workspace account, then their Vercel account, pivoted into a Vercel environment, and enumerated and decrypted non-sensitive environment variables belonging to a subset of customers, who were told to rotate credentials immediately. Vercel engaged Google Mandiant, notified law enforcement, and published IOCs; its investigation later identified a small number of additional compromised accounts.

What this means for youIf you use Vercel or a similar hosting service, rotate any secrets stored in its environment settings, especially if you connected a third-party AI tool to your accounts. At work, check which outside AI tools have been granted access to company email, cloud, or code accounts.