Vercel confirms security breach; hackers claim stolen data for sale

Vercel, the popular deployment platform for Next.js and serverless apps, disclosed a security incident in April 2026 where attackers gained unauthorized access and allegedly obtained sensitive data. For indie makers relying on Vercel for hosting, this is a reminder to review access logs, rotate credentials, and monitor for any unauthorized deployments or data exposure.