Vercel Breach: OAuth Hijack Exposed Customer API Keys, Source Code
Attackers gained access through a compromised employee Google account linked to a third-party app, exposing unencrypted credentials. Vercel warns of downstream breaches across "hundreds of users across many organizations."