BreachPublished 28 Apr 2026

Vimeo Confirms User and Customer Data Breach

Source SecurityWeek

Description

The ShinyHunters group is threatening to leak stolen files unless Vimeo agrees to pay a ransom. The post Vimeo Confirms User and Customer Data Breach appeared first on SecurityWeek .

Impact

The breach exposed technical data, video titles, metadata, and some customer email addresses. However, critical sensitive information such as Vimeo video content, valid user login credentials, and payment card information were not compromised. There was no disruption to Vimeo's systems or services reported. The threat actor is attempting extortion via ransom demands, which could lead to data leakage if the ransom is not paid.

Defensive guidance

Vimeo has disabled the compromised Anodot credentials and removed its integration to prevent further unauthorized access. The company has secured its environment and is actively monitoring the situation. Law enforcement has been notified. Users are not required to take action as no valid login credentials or payment information were exposed. Organizations using third-party integrations should review and secure vendor access to minimize similar risks.

Summary

The ShinyHunters group conducted a data breach against Vimeo by exploiting access to the Anodot analytics platform, a third-party vendor integrated with Vimeo. The attackers obtained data from Vimeo's Snowflake and BigQuery instances, including technical data, video titles, metadata, and some customer email addresses. Vimeo confirmed that sensitive information such as video content, valid user credentials, and payment card data were not accessed. Following the breach, Vimeo disabled Anodot credentials and severed integration with its systems. The group is demanding a ransom with a deadline for response. Law enforcement is involved, and the investigation remains active.

References

securityweek.com/vimeo-confirms-user-and-customer-data-breach/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 28 Apr 2026, 17:21 UTC

References

Community reviews