Vercel CEO Updates on Security Incident Investigation: Attackers Obtained Account Keys Through Malware Distribution, Impact Exceeds Initial Assessment

On April 23, Vercel’s CEO announced on social media that the team has completed an in-depth security investigation, analyzing nearly 1 PB of complete Vercel network and API logs, far exceeding the initial Context.ai account breach incident. The investigation revealed that the attackers’ activities extended beyond Context.ai and involved a broader distribution of malware aimed at stealing account keys from platforms like Vercel. Once the keys are obtained, the attackers quickly and comprehensively enumerate non-sensitive environment variables. Current measures include deepening collaboration with industry partners such as Microsoft, AWS, and Wiz to jointly protect the broader internet ecosystem; other suspected victims have been notified and advised to immediately rotate credentials and strengthen security best practices.