Vercel CEO updates on the security incident investigation: Attackers obtained account keys by distributing malware, with the impact exceeding initial assessments.

BlockBeats news, April 23 — the Vercel CEO said on social media that the team has completed an in-depth security investigation. The analysis covers nearly 1 PB of complete Vercel network and API logs, far beyond the initial Context.ai account breach incident.

The investigation shows that the attacker’s activity scope extends beyond Context.ai, and that malware has been distributed on a wider scale with the goal of stealing account keys for platforms such as Vercel. Once the keys are obtained, the attacker quickly and comprehensively enumerates non-sensitive environment variables. The measures currently being taken include deepening cooperation with industry partners such as Microsoft, AWS, and Wiz to jointly protect a broader internet ecosystem; other suspected victims have been notified, and they are advised to immediately rotate credentials and strengthen security best practices.