cyber.hendryadrian.com
Cyber Attack & Data Breach · therecord.media

Vercel Says Breach Stemmed From Compromised Third-Party AI Tool

· Original article ↗

Summary

Vercel says a compromise of third-party AI tool Context.ai led to an employee’s Google Workspace account being taken over and some non-sensitive environment variables accessed. Vercel is investigating and told affected customers to rotate credentials.

Key points

  • Vercel acknowledged a breach and said a compromised Context.ai tool led to an attacker taking over an employee’s Google Workspace account.
  • The attacker accessed some Vercel environments and environment variables not marked sensitive; Vercel said it has no evidence that sensitive variables were accessed.
  • Vercel warned affected customers to rotate credentials and secrets, noting that deleting projects or accounts may not remove risk.
  • Context.ai said an attacker had accessed its AWS environment in March and may have compromised some consumer users’ OAuth tokens; the company said a compromised token appears to have been used to access Vercel’s Google Workspace.
  • Cybersecurity research companies traced the incidents to an infostealer infection allegedly involving a Context.ai employee’s device.
  • The hacker demanded $2 million and claimed ties to ShinyHunters, which denied involvement. Vercel hired Mandiant and said law enforcement is involved.

Article Details

Victim Organization
Vercel
Incident Type
Third-party tool compromise leading to unauthorized access to a Vercel employee’s Google Workspace account and some Vercel environments and non-sensitive environment variables.
Data Types Exposed
  • Environment variables not marked as sensitive
  • Vercel credentials for a limited subset of customers were reported compromised
  • Context.ai said OAuth tokens for some consumer users were likely compromised
Affected Records
Not disclosed
Affected Data Size
Unknown
Operational Impact
Unauthorized access to an employee’s Vercel Google Workspace account and some Vercel environments. Vercel warned that compromised secrets could provide access to production systems and instructed affected customers to rotate credentials. Vercel said it had no evidence that environment variables marked sensitive were accessed.
Ransom Or Extortion
A hacker demanded a $2 million ransom. The hackers allegedly behind the incident claimed ties to ShinyHunters, which denied involvement.
Claim Status
confirmed

MITRE ATT&CK

T1528 · Steal Application Access TokenContext.ai said the unauthorized actor likely compromised OAuth tokens and appears to have used a compromised token to access Vercel’s Google Workspace.

People

Guillermo RauchVercel CEO who commented on the attackers’ speed and understanding of Vercel and urged customers to rotate credentials and monitor access.Randolph BarrCequence Security CISO who commented on the risks posed by exposure of environment variables and tokens.

Threat Actors

ShinyHuntersThe hackers allegedly behind the incident claimed to be part of ShinyHunters; the group denied involvement in the Vercel breach.

Vendors

Context.aiA popular cloud platform, Vercel, suffered a breach traced to a compromised third-party AI tool, Context.ai, which allowed attackers to access an employee’s Google Workspace account and some non-sensitive environmentCrowdStrikeThe company hired CrowdStrike to investigate the attack and “informed a customer we identified as impacted.”MandiantVercel is investigating with Mandiant and law enforcement, has warned affected customers to rotate credentials, and cautioned that deleting projects or accounts does not remove all risk.VercelA popular cloud platform, Vercel, suffered a breach traced to a compromised third-party AI tool, Context.ai, which allowed attackers to access an employee’s Google Workspace account and some non-sensitive environment

Products

Context.ai suiteThe impacted Vercel employee signed up for the Context.ai suite using their work account.Google Workspaceto a compromised third-party AI tool, Context.ai, which allowed attackers to access an employee’s Google Workspace account and some non-sensitive environment variables.

Related Articles