Reports indicate that internal Vercel data is being sold on a hacker forum for $2 million, with a starting bid of $500,000 equivalent in BTC.

CoinFeed reported on April 19th that, according to a post by community user Ryan on the X platform, a user claiming to be affiliated with ShinyHunters on the hacker forum BreachForums posted that they were selling Vercel's internal database, access keys, and source code for approximately $2 million (starting bid $500,000 equivalent in BTC). The post claimed the data contained sensitive information such as employee account permissions, API keys, NPM and GitHub tokens, and implied it could be used for "supply chain attacks." Related screenshots appear to be from Vercel's internal systems (including Linear and user management panels), showing fields such as user IDs, email addresses, and administrator privileges. It is alleged that Vercel has contacted the poster via Telegram requesting them to cease contact with employees, indicating direct communication between the two parties.