Vercel Cloud Development Platform Compromised in ShinyHunters Hack

Apr 20, 2026

Vercel, a major web development platform used by thousands of companies to host and deploy applications, confirmed it suffered a security breach that impacted a limited subset of its customers. Hackers claiming to be ShinyHunters, the group behind the recent Rockstar Games hack, posted stolen data online including employee names, email addresses, and activity timestamps, and are attempting to sell the compromised information. Vercel attributed the breach to a compromised third-party AI tool but declined to specify which vendor was involved. The incident raises concerns about supply chain security risks for companies relying on third-party integrations in their development platforms.

Vercel security breach and data exposure

▪Vercel was compromised in a security incident.
▪Vercel confirmed that a security incident had occurred.
▪Vercel is a major development platform that hosts and deploys web apps.
▪Hackers are attempting to sell data stolen from Vercel.
▪Data posted online from the Vercel breach included employee names, email addresses, and activity time stamps.
▪The Vercel security incident impacted a limited subset of Vercel's customers.

ShinyHunters hacking group involvement

▪A person claiming to be a member of ShinyHunters posted Vercel data online.
▪ShinyHunters was behind the recent hack of Rockstar Games.

Third-party AI tool as attack vector

▪A compromised third-party AI tool was the avenue for the attack on Vercel.
▪Vercel did not specify which third-party was involved in the security incident.

Perspective of Vercel

▪Vercel attributed the security breach to a compromised third-party AI tool rather than its own infrastructure.
▪Vercel characterized the security incident as affecting only a limited subset of its customers.

Perspective of ShinyHunters

▪A person claiming ShinyHunters membership publicly posted Vercel data as proof of the breach.
▪ShinyHunters is attempting to profit from the Vercel breach by selling stolen customer data.

Perspective of Vercel customers

▪Some Vercel customers had their employee names, email addresses, and activity timestamps exposed in the breach.
▪Vercel customers affected by the breach face uncertainty about what additional data may have been compromised.