Vercel Confirms Data Breach

CEO Guillermo Rauch stated that the attacker took over an employee's Google Workspace account, granting access to non-sensitive environment variables.

Vercel has 'named and shamed' the AI tool, identified as Context.ai, which reportedly suffered an OAuth tangle that enabled the takeover.

The company has notified all affected customers and is conducting a thorough investigation into the incident.

This breach highlights the growing security risks associated with integrating third-party AI tools into enterprise systems.