Vercel Confirms Breach Linked to Third-Party AI Tool

Vercel disclosed a security breach that allowed unauthorized access to parts of its internal systems. According to the company, the incident began after Context.ai, a third-party AI tool used by an employee, was compromised. The attacker allegedly took over the employee's Google Workspace account and accessed some internal environments and non-sensitive environment variables. While attribution has not been officially confirmed, ShinyHunters has been publicly associated with the incident. The case is especially relevant because Context.ai also reported unauthorized AWS access in March 2026, followed by indicators that some user OAuth tokens may have been exposed. Hudson Rock further reported that a Context.ai employee device was infected with Lumma Stealer in February 2026, raising the possibility that this initial compromise triggered broader supply-chain escalation.