Vercel says some of its customers' data was stolen prior to its recent hack | TechCrunch

"Vercel identified evidence of malicious activity on its network preceding the early-April breach, suggesting that the incident may have broader security implications than initially known."

"We have uncovered a small number of customer accounts with evidence of prior compromise that is independent of and predates this incident, potentially as a result of social engineering, malware, or other methods."

"The new update suggests the data breach may be larger in scope and could have lasted longer than initially thought."

"Rauch pointed to early signs that the hackers relied on malware that compromises computers in search of valuable tokens like keys to Vercel accounts and other providers."

Vercel reported a data breach where hackers accessed customer data, indicating prior compromises that may have resulted from social engineering or malware. The company found more accounts affected by the April incident and noted that the breach could be larger than initially believed. CEO Guillermo Rauch mentioned that hackers were active beyond the initial compromise linked to Context AI. Vercel has not disclosed the number of affected customers or the extent of the second compromise, but early signs suggest malware was used to target valuable account tokens.

Read at TechCrunch