Vercel data breach predates initial discovery

Vercel disclosed that hackers accessed customer data prior to its recently identified data breach, indicating a potentially wider scope and longer duration than initially understood. The company's investigation revealed evidence of malicious activity preceding the early April incident, possibly due to social engineering or malware. Hackers exploited a vulnerability in a third-party application, gaining access to an employee's account and subsequently Vercel's internal systems, including unencrypted customer credentials. This suggests the breach may affect more companies and victims could emerge as investigations continue.