Vercel says some of its customers’ data was stolen prior to its recent hack

Vercel disclosed that hackers accessed customer data prior to its April breach discovery, revealing the incident has broader scope than initially known. The company identified evidence of prior independent compromise potentially caused by infostealer malware targeting API credentials. CEO Guillermo Rauch confirmed threat actors operated beyond the Context AI supply chain incident and accessed internal systems using harvested API tokens.