Vercel
Hack or exploit on Apr 19, 2026 · Supply Chain Attack
What happened
Vercel CEO Guillermo Rauch stated on X that the company is currently conducting a full investigation into a security incident. The incident originated from a compromise of Context.ai, an AI platform used by a Vercel employee. This breach led to the attacker gaining access to the employee’s Google Workspace account associated with Vercel. From there, the attacker carried out a series of actions that further escalated access within the environment. Vercel clarified that all customer environment variables are fully encrypted at rest. However, the platform allows some variables to be explicitly marked as “non-sensitive.” The attacker was able to enumerate these and leverage them to gain additional access. The company noted that the speed of the attacker’s actions and their understanding of Vercel’s architecture were beyond expectations.
Details
- Date
- Apr 19, 2026
- Kind
- Hack or exploit
- Method
- Supply Chain Attack
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Polymarket International 2026 · Hack or exploit · $2.7M
Bloom Trading Bot 2026 · Hack or exploit · $953K
Holdstation 2026 · Hack or exploit · $462K
Long Bridge 2026 · Hack or exploit · $118K
SwanBluechip, "Vercel hack, Apr 19, 2026: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht385614ae1c/ (data as of 2026-10-31).