Vercel Says Attack Fallout Reached More Customers and Third-Party Systems
Summary
Vercel says its investigation found additional customer accounts affected by an attack traced to a Context.ai compromise involving Lumma Stealer and stolen API tokens. The number of affected accounts and containment status remain undisclosed; Vercel found no evidence of
Key points
- Vercel said ongoing analysis found additional customer accounts affected, but has not provided a count or range.
- Vercel traced the attack to a compromise involving third-party AI tool Context.ai; Hudson Rock previously linked the incident to Lumma Stealer infecting an employee's device.
- Vercel's logs showed repeated, rapid API use focused on enumerating environment variables after attackers obtained API keys or tokens.
- Vercel has not specified which customer systems or data were compromised, or described whether the threat was contained.
- Vercel said it found no evidence that its published software packages were tampered with and believes its supply chain remains safe.
- A persona claiming to be ShinyHunters said it was selling stolen data; a Google Threat Intelligence Group analyst said the persona was likely an imposter.
- Vercel also disclosed a small number of customer compromises it said did not appear to originate on its systems or relate to the April incident.
Article Details
- Victim Organization
- Vercel
- Incident Type
- Breach of Vercel's internal systems, traced by the company to a compromise at third-party AI tool Context.ai. The incident involved Lumma Stealer infecting an employee's device and attackers using stolen API keys and tokens to access Vercel resources and customer data.
- Data Types Exposed
- API keys and tokens
- Environment variables
- Affected Records
- A small number of customer accounts were reportedly impacted; the exact number was not disclosed.
- Operational Impact
- Vercel reported attacker activity involving rapid API use and enumeration of environment variables, and said customer data was stolen and decrypted. The extent of downstream customer exposure remains undefined. Vercel said it found no evidence that its published software packages were tampered with and believes the supply chain remains safe.
- Ransom Or Extortion
- An online persona identifying itself as ShinyHunters claimed responsibility and attempted to sell data allegedly including access keys, source code, and databases. Austin Larsen said the persona was likely an imposter; the claimed data and sale were not confirmed in the article.
- Claim Status
- confirmed
People
Austin LarsenPrincipal threat analyst at Google Threat Intelligence Group who assessed that the online persona claiming to be ShinyHunters was likely an imposter.Guillermo RauchVercel CEO who described the company's analysis of network and API logs and the observed pattern of API use and environment-variable enumeration.Munish Walther-PuriHead of critical digital infrastructure at TPO Group who discussed the risks of OAuth trust relationships and potential downstream exposure.
Threat Actors
Malware
Vendors
Context.aiThe incident originated at thirdâparty Context.ai, involved Lumma Stealer and the theft of API keys/tokens used to enumerate environment variables, creating potentially large downstream risk.MandiantVercel says its published packages appear untampered and the supply chain remains safe while Mandiant investigates.VercelVercel said ongoing analysis found the fallout from an attack on its internal systems affected more customers than previously known, with a “small number” of accounts impacted and investigations uncovering additional
Products
Context.aiThe incident originated at thirdâparty Context.ai, involved Lumma Stealer and the theft of API keys/tokens used to enumerate environment variables, creating potentially large downstream risk.Next.jsVercel created and maintains Next.js, a platform supporting AI agents that’s downloaded more than 9 million times per week, and other popular open-source projects.
Industries
Cloud infrastructureThe company, which makes tools and hosts cloud infrastructure for developers, maintains a “small number” of accounts were impacted, but it has yet to share a number or range of known incidents linked to the attack.SoftwareThe company said it’s found no evidence of tampering across the software packages it publishes, concluding “we believe the supply chain remains safe.”