Vercel states that its review of nearly 1 petabyte of logs found attacker activity beyond Context.ai, prompting victim notifications and urgent credential rotation guidance.
Vercel completed a security investigation involving nearly 1 petabyte of network-wide and API logs and found that attacker activity extended beyond the Context.ai breach. The company said a malware campaign targeted account keys on platforms including Vercel, with threat actors using stolen credentials for rapid API access and account interrogation. Vercel notified suspected victims and urged immediate credential rotation, while the reported activity centered on automated credential use rather than a confirmed disclosure of sensitive environment variables.