Vercel Breach Claims: What Security Teams Should Do About Environment Variables, Tokens, and Deployment Trust
Vercel confirmed unauthorized access to certain internal systems while hackers claimed to be selling stolen data. Security teams should avoid panic, but immediately review activity logs, rotate exposed environment variables, harden sensitive variables, and check GitHub, npm, and deployment tokens.