Context.ai seems like it was the SPOF. By definition it has a lot of your data, and they didn’t secure it properly.

Clearly, Vercel should not have been compromised by this. I don't know who Context.ai is but I do know Vercel and I expected better from them. I also think we can expect to see a lot more stories like this.