The ShinyHunters group conducted a data breach against Vimeo by exploiting access to the Anodot analytics platform, a third-party vendor integrated with Vimeo. The attackers obtained data from Vimeo's Snowflake and BigQuery instances, including technical data, video titles, metadata, and some customer email addresses. Vimeo confirmed that sensitive information such as video content, valid user credentials, and payment card data were not accessed. Following the breach, Vimeo disabled Anodot credentials and severed integration with its systems. The group is demanding a ransom with a deadline for response. Law enforcement is involved, and the investigation remains active.

The breach exposed technical data, video titles, metadata, and some customer email addresses. However, critical sensitive information such as Vimeo video content, valid user login credentials, and payment card information were not compromised. There was no disruption to Vimeo's systems or services reported. The threat actor is attempting extortion via ransom demands, which could lead to data leakage if the ransom is not paid.

Vimeo has disabled the compromised Anodot credentials and removed its integration to prevent further unauthorized access. The company has secured its environment and is actively monitoring the situation. Law enforcement has been notified. Users are not required to take action as no valid login credentials or payment information were exposed. Organizations using third-party integrations should review and secure vendor access to minimize similar risks.