Posting here because I’ve exhausted the normal channels and this involves production sites for paying clients.
On June 29th, my personal Vercel account, with essentially my last 2 years of work, a handful of clients for my agency. They gained access through an old work email address that was still attached to my account as a login method, reset the password, and then removed all of my passkeys and alternate sign-in methods so I have no way back in. I have the notification emails Vercel sent showing the logins, including location data, and a clear timeline of when each change happened.
This account hosts production websites for my clients. I’ve been unable to access or update any of them for over a week, which is causing real ongoing damage to my business.
I submitted the Account Recovery form and emailed security@vercel.com on [June 29th] with full details and evidence. The only response so far has been the automated confirmation with case number 01281487. I’ve heard nothing since.
What I’m asking for:
Can someone from the Vercel team pick up case #01281487 and route it to whoever handles account security? I need my access restored, the unauthorized party locked out, and the account’s access logs preserved, since this may become a legal matter.
Happy to verify ownership however you need. I can provide original signup details, billing history, I can show proof of ownership through domain records for all custom domains attached to projects on the site (outside of the 3 domains that were purchased through vercel ha). Whatever I can provide for proof of ownership - I am happy to provide.
Thanks in advance. I understand queues get backed up, but a week with a hostile party controlling client production infrastructure is past the point where I can keep waiting quietly. Just really stressing out. Cheers