Threat actors gained unauthorized access to certain internal Vercel systems. The attackers claim to be selling access keys, source code, database data, internal deployments, and API keys including NPM tokens and GitHub tokens. A text file containing 580 employee data records with names, Vercel email addresses, account status, and activity timestamps was shared. The attackers also shared screenshots of what appears to be an internal Vercel Enterprise dashboard and claimed they had access to multiple employee accounts with access to several internal deployments.