Vercel breached through a compromised third-party AI tool's Google OAuth app
Vercel says an attacker who compromised Context.ai, a third-party AI tool a Vercel employee used, took over that employee's Google Workspace account and then their Vercel account. From there the attacker moved into Vercel systems and read environment variables that customers had not marked sensitive, which can hold API keys and database passwords. A limited set of customers was affected. Vercel says its npm packages were not tampered with.
Sources
- Primary: https://vercel.com/kb/bulletin/vercel-april-2026-security-incident
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesA supply chain sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.