We need written confirmation around whether we were affected by the april 2026 breach of Vercel.
We've emailed security about 10 times and received nothing back. We were told that we should have been notified either of a breach or lack thereof, but we were notified of neither.
We need this in writing, as it is blocking an enterprise prospect for us.
If we have confirmed you are impacted, the account owner(s) of your team received an email.
If we have not seen evidence of compromise thus far, all members of your team received an email. If someone previously unsubscribed or if the team was deleted, it is possible they didn’t receive the email.
The findings from additional IOCs revealed a limited subset of customer impact, but if you have not heard from us about this, we have not seen evidence of compromise. See the Security Bulletin for the latest.