Vercel Confirms Data Breach: Hackers Target Cloud Company, Demand $2 Million
Vercel data breach: How hackers targeted the cloud company and offered its data for sale for $2 million
The Economic TimesImage: The Economic Times
Vercel, a U.S.-based cloud development platform, confirmed a data breach that exposed information from a limited number of customers after an employee's Google Workspace account was compromised. Hackers, possibly linked to the group ShinyHunters, are demanding $2 million for the stolen data, which includes source code and API keys.
- 01Vercel experienced a data breach due to a compromised employee account linked to a third-party AI platform.
- 02Hackers exploited vulnerabilities quickly, potentially using AI tools to navigate Vercel's systems.
- 03The group ShinyHunters is reportedly selling the stolen data for $2 million on BreachForums.
- 04Vercel has engaged incident response experts and law enforcement to investigate the breach.
- 05The company is enhancing security measures and has advised affected customers to change sensitive credentials.
Advertisement
In-Article Ad
Vercel, an American cloud development platform, confirmed a security breach on Sunday, revealing unauthorized access to data affecting a limited subset of customers. The breach was traced back to a compromised Google Workspace account of an employee, exploited through a vulnerability in the third-party AI platform Context.ai. Vercel CEO Guillermo Rauch stated that hackers infiltrated internal systems rapidly, suggesting the use of AI-driven tools to identify vulnerabilities. The attackers, believed to be linked to the group ShinyHunters, are attempting to sell the stolen data, which includes source code and API keys, for $2 million on BreachForums. Despite the breach, Vercel assures that sensitive data remains encrypted. The company has initiated a thorough investigation, collaborated with Google's Mandiant team, and is implementing new security measures to protect customer data. Affected customers have been advised to change their passwords and monitor access logs to mitigate unauthorized activity.
Advertisement
In-Article Ad
This breach could affect Vercel's customers, especially those whose data was exposed, potentially compromising their projects and sensitive information.
Advertisement
In-Article Ad
Reader Poll
How concerned are you about data breaches in cloud services?
Connecting to poll...
More about Vercel
Read the original article
Visit the source for the complete story.



