App host Vercel says it was hacked and customer data stolen

Vercel said attackers breached internal systems and stole some customer data after an employee connected a third-party Context AI app via OAuth.

The attackers reportedly took over a Google account and reached unencrypted credentials, raising concerns about exposed API keys and other sensitive data.

Vercel said its Next.js and Turbopack projects were not affected.

The company has told customers to rotate any exposed keys and is investigating the incident with Context AI.