Vercel has been hacked: environment variables compromised (vercel.com)

Environment variables were stored on their end in plain text, unless they were specifically marked as sensitive, which was opt-in only.