:

VERCEL CONFIRMS SECOND DATA BREACH FROM EARLIER COMPROMISE

SECURITY DESK1 MIN READ
THU, APR 23, 2026

■ AI-SUMMARIZED FROM 2 SOURCES ▸ TIMELINE

Vercel discovered evidence of a separate customer data theft occurring before its publicly disclosed April breach. The hosting platform uncovered the additional compromise while investigating the initial incident.

The app and website hosting company expanded its investigation into the April breach and found proof of an earlier unauthorized access to customer accounts. Vercel has not disclosed specific details about what data was stolen, the number of affected customers, or the timeline of the prior compromise. This marks the second confirmed incident involving Vercel customer accounts in recent weeks. The company did not immediately clarify whether the two breaches share a common cause or if they resulted from separate vulnerabilities. Vercel has notified affected customers and recommended security measures. The company is conducting a broader review of its systems to identify any additional unauthorized access. Customers are advised to review their account activity and change credentials if necessary. The incidents highlight ongoing security challenges in the cloud hosting sector, where breaches can expose sensitive infrastructure and application data belonging to thousands of businesses relying on these platforms.

■ SOURCES

TechCrunchTechmeme

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

PaperCut has released a second emergency security update for its NG and MF print management software after researchers discovered bypass methods for the initial fixes. The vulnerabilities are currently being exploited in the wild.

3H AGOSecurity Desk

A 68-year-old has been sentenced to over six years in prison in the U.K. for operating an illegal IPTV service that generated £980,812 ($1.3 million) over three years.

6H AGOIndustry Desk

A detailed analysis examines how the internet has shifted toward predatory practices, drawing significant engagement from tech community members on Hacker News with 227 points and 120 comments.

7H AGOIndustry Desk

A critical vulnerability in the popular GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The maximum-severity flaw requires immediate patching.

7H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.