Vercel Got Pwn’d ![rw-book-cover](https://pbs.twimg.com/profile_images/1909353910130950147/EeSGdgA5.jpg) 🔗 **Source:** [Vercel Got Pwn’d](https://twitter.com/theo/status/2045870216555499636/?rw_tt_thread=True) Vercel got pwn’d. Here’s what I’ve managed to get from my sources: 1. Primary victim here is Vercel. Things like their Linear and GitHub got hit with majority of it 2. Env vars marked as sensitive are safe. Ones NOT marked as sensitive should be rolled out of precaution 3. The method of compromise was likely used to hit multiple companies other than Vercel. ### of customers impacted is believed to be limited, but hard to know just yet. Will share more updates as I get them. ![Image](https://pbs.twimg.com/media/HGRkHpDWwAApZjH.jpg?name=orig) ![](https://pbs.twimg.com/profile_images/1767351110228918272/3Pndc5OT.png) [Vercel](https://twitter.com/vercel) [@vercel](https://twitter.com/vercel) We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: [vercel.com/kb/bulletin/ve…](https://vercel.com/kb/bulletin/vercel-april-2026-security-incident) [Posted Apr 19, 2026 at 2:00PM](https://twitter.com/vercel/status/2045865072074035664), Vercel Got Pwn’d, Theo - t3.gg, 01kpk940fp0cwqczzvbsdggbcg.