The Chief Information Security Officer of SlowMist, 23pds, retweeted that the unauthorized access to Vercel’s internal systems appears to be linked to an internal data leak. The related tweet states that someone claiming to be ShinyHunters on BreachForums is offering for sale, for $2 million, what is purported to be Vercel’s internal database, access keys, source code, employee accounts, API keys, NPM tokens, and GitHub tokens. The leaked data allegedly involves Vercel’s internal Linear system and user management system. Previously, the cloud hosting platform Vercel disclosed that its internal systems had been accessed without authorization, affecting a small number of customers.
Vercel Security Incident Linked to Alleged Internal Database and Key Leak
TechFlowShare
Summary
A security breach at Vercel is suspected to originate from an internal data leak, according to a report from TechFlow. SlowMist’s CISO, 23pds, noted that a hacker known as ShinyHunters is selling Vercel’s internal database, access keys, and tokens for $2 million. The data reportedly includes API keys, NPM tokens, and GitHub tokens, granting access to Linear and user management systems. Vercel previously confirmed unauthorized access to its systems, affecting a small number of users. The incident has raised concerns regarding inflation data across the broader tech and crypto sectors.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.