BleepingComputer · Lawrence Abrams ·

Vercel says its internal systems were accessed via a compromised third-party AI tool, after a user with a ShinyHunters handle claimed a breach on BreachForums

Update 4/19/26: Added additional information from Vercel that was disclosed after publishing.

Vercel says its internal systems were accessed via a compromised third-party AI tool, after a user with a ShinyHunters handle claimed a breach on BreachForums

Lead Source

How this story grew

Coverage · 0 Discussion · 0
Apr 19Apr 21

More

Vercel: Vercel
TechCrunch: TechCrunch
Context: Context
Cybersecurity Dive: Cybersecurity Dive
Tom's Hardware: Tom's Hardware
Help Net Security: Help Net Security
PaymentSecurity.io: PaymentSecurity.io
CSO: CSO
Security Boulevard: Security Boulevard
Trend Micro: Trend Micro
TechRadar: TechRadar
PiunikaWeb: PiunikaWeb
The Cyber Express: The Cyber Express
The Indian Express: The Indian Express
Ace of Spades HQ: Ace of Spades HQ
Blockhead: Blockhead
The Register: The Register
crypto.news: crypto.news
Security Affairs: Security Affairs
Unchained: Unchained
Decrypt: Decrypt
Protos: Protos
eSecurity Planet: eSecurity Planet
Peridot Blog: Peridot Blog
Cointelegraph: Cointelegraph
Livemint: Livemint
Decipher: Decipher
Cyber Security News: Cyber Security News
CoinDesk: CoinDesk
The Information: The Information
iTnews: iTnews
CyberInsider: CyberInsider
The Verge: The Verge
XDA Developers: XDA Developers
The Stack: The Stack

Discussion

TechSnif Coverage

Vercel Discloses Security Incident After ShinyHunters Claims

Cloud platform Vercel detected unauthorized access to internal systems after hackers claimed to be selling stolen data.

Vercel has disclosed a security incident after detecting unauthorized access to its internal systems. The disclosure follows claims by a threat actor operating under the ShinyHunters handle on BreachForums.

The hacker alleged they breached Vercel's systems and attempted to sell stolen data on the notorious cybercrime forum. Vercel acknowledged the unauthorized access but has not detailed the full scope of what was compromised.

ShinyHunters is a well-known handle in breach circles, previously linked to high-profile data theft operations. BreachForums remains a go-to marketplace for threat actors looking to monetize stolen information.

The cloud development platform, widely used by developers for frontend deployment and serverless functions, has not yet shared specifics on what data may have been accessed or how many users could be affected.