Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Vercel Inc.

vercel.com

Vercel Inc. was listed on the ShinyHunters leak site on Oct 18, 2026. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
ShinyHunters
First listed
Oct 18, 2026
Claims recorded
1

Leak-Site Claim.

ShinyHuntersConfirmed claim
Posted on the leak site
Oct 18, 2026
Collected by Brandefense
Oct 18, 2026
Data claimed
Not stated
Leak-site post text, written by the group
ShinyHunters threat actor claims to have compromised Vercel Inc. (vercel.com), a major cloud computing platform and creator of Next.js framework. The actor alleges possession of access keys, source code, database records, employee accounts, API keys (including NPM and GitHub tokens), and internal deployment credentials. Claims the breach occurred on April 19, 2026, stemming from third-party compromise (Context.ai). Threat actor is demanding payment and threatening to leak all data, emphasizing potential for massive supply chain attack affecting 6 million+ weekly Next.js users. Contact…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Abaco Informatica
abaco-informatica.com.ar
ShinyHuntersARArgentinaTechnologyNot stated
Correios
correos.es
ShinyHuntersESSpainTransportation and LogisticsNot stated
Ticketmaster
ticketmaster.com
ShinyHuntersUSUnited StatesMedia and EntertainmentNot stated
Somali Immigration and Nationality Agency (HSJ); Ministry of Justice and Constitutional Affairs
etas.gov.so
ShinyHuntersSOSomaliaRetailNot stated
DexCom, Inc.
dexcom.com
ShinyHuntersUSUnited StatesHealthcareNot stated
O'Reilly Automotive
oreillyauto.com
ShinyHuntersUSUnited StatesRetailNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.