ShinyHunters Vimeo data breach exposes information of over 119,000 users. 2026-05-16 18:05 Early this year, Vimeo faced a security incident leading to the theft of personal details tied to over 119,000 people by the ShinyHunters hacking collective. Information on the leak became known via Have I Been Pwned, a service tracking compromised accounts, after examining the exposed records. Information security training Late last month, Vimeo revealed a security issue affecting its systems. The platform, known for hosting and streaming videos globally, serves many millions of active users. Access by unknown parties came via a flaw tied to Anodot. This firm provides tools that spot irregularities in data flows. Its technology connects directly into parts of Vimeo's infrastructure. The event marks one point where external partnerships introduced risk. Details emerged only after internal reviews concluded. One thing became clear: the entry did not stem from inside Vimeo's own network. Instead, it traced back to how outside services link up. Security teams now examine how third-party integrations affect overall protection levels. Surprisingly, early reports showed hackers obtained technical data, video metadata, and titles - sometimes even user emails. Despite the breach, payment information, account passwords, and live session tokens stayed secure, according to internal confirmation. Throughout the event, Vimeo's main system kept running smoothly, maintaining full service availability. Unexpectedly, operations continued without noticeable interference. Discover more Incident response planning Malware removal software IT security services Right away, Vimeo shut down every login linked to Anodeto stop any more unwanted entry once the break-in came to light. Instead of handling things alone, outside cyber experts joined to support the inquiry. At the same time, officials responsible for enforcing laws got word about what happened. Later, even so, the hackers released a huge 106GB collection of stolen files online when talks reportedly broke down. That data appeared on a hidden website used by the ShinyHunters crew, who stated weak login credentials tied to Anodot opened doors unexpectedly. From there, they moved into Vimeo's storage platforms - Snowflake and BigQuery - with little resistance. Some 119,200 individuals had their email addresses disclosed, along with names in certain instances, based on findings from Have I Been Pwned after reviewing the leaked data. Though the breach details have circulated, Vimeo hasn't officially verified how many accounts were impacted. Inside these breaches, access began through deceptive emails or fake support calls tricking staff. Not long ago, compromised logins gave hackers entry to identity tools like Okta and Microsoft Entra. From there, movement spread toward customer relationship software, team messaging apps, file storage, design programs, help desks, and workplace productivity suites. Cloud infrastructure and subscription-based tech now draw more attention than before. Patch management solutions Breach attempts often follow weak points in unified login setups across company networks. Though main networks stay secure, outside providers sometimes open doors hackers exploit. A breach in one connected service might unlock several company areas at once. Experts observe rising incidents targeting cloud logins and partner tools for this reason. Instead of attacking central defenses, intruders shift focus to these links. Sensitive client data ends up at risk even if primary infrastructure holds firm. Recently, ShinyHunters took credit for hacks spanning education, retail, health care, gaming, and government bodies. Vimeo's situatio Content was cut in order to protect the source.Please visit the source for the rest of the article. Discover more Antivirus protection Cloud data security Secure browsing extension Read the original article: Ticketmaster and other organisations' Snowflake accounts were said to have been accessed by a ShinyHunters hacker via a breach of software engineering firm EPAM Systems, validating a Mandiant report attributing some of the intrusions to third-party contractor hacks, Wired reported. According to the hacker, information-stealing malware and a remote access trojan... Hacking & Cracking June 20, 2024 In "CySecurity News - Latest Information Security and Hacking Incidents" Hackers who stole terabytes of data from Ticketmaster and other customers of the cloud storage firm Snowflake claim they gained access to some Snowflake accounts by breaching a Belarusian-founded contractor working with those customers. Approximately 165 customer accounts were potentially affected in this hacking campaign targeting Snowflake's clients, with a... June 20, 2024 In "CySecurity News - Latest Information Security and Hacking Incidents"

Vimeo breach exposes data of 119,000 users after ShinyHunters extortion campaign. by Jason Phillips Security News Published: 2026 May 6, 07:54 Discover more Computer Security Web Browsers Video platform Vimeo has confirmed that personal information belonging to more than 119,000 users was exposed following a cyberattack linked to the ShinyHunters extortion group. The incident stems from a breach involving Anodot, a third-party analytics provider used by Vimeo and multiple other companies. According to Vimeo, attackers gained unauthorized access to certain user and customer data through the compromised integration. Data breach tracking service Have I Been Pwned later confirmed that the exposed dataset contains approximately 119,200 unique email addresses, in some cases accompanied by names. Discover more Computer Hardware Advertising & Marketing Hacking & Cracking Vimeo said the compromised information primarily included technical data, video titles, metadata, and some customer email addresses. The company emphasized that uploaded video content, user login credentials, and payment card information were not accessed during the incident. The attack has been linked to the ShinyHunters cybercrime group, which publicly listed Vimeo on its extortion portal and threatened to leak stolen files unless a ransom demand was met. The group claimed to have accessed data from Vimeo's Snowflake and BigQuery environments through the Anodot compromise. Security researchers say the incident reflects a broader trend of attackers targeting third-party integrations and cloud analytics platforms to gain downstream access to customer environments. In this case, compromised authentication tokens tied to Anodot reportedly allowed unauthorized access without directly breaching Vimeo's own infrastructure. Following the discovery, Vimeo revoked all Anodot credentials, removed the analytics integration from its systems, and engaged external cybersecurity experts to investigate the breach. The company also notified law enforcement authorities. Discover more Antivirus & Malware The company stated that the attack did not disrupt services or platform operations. However, exposed email addresses and metadata could still create phishing and social engineering risks for affected users, especially as cybercriminal groups increasingly weaponize leaked datasets in follow-up campaigns. The breach adds Vimeo to a growing list of organizations affected by attacks connected to Anodot and ShinyHunters' activity in 2026. Investigators believe the campaign has impacted multiple companies through interconnected cloud services and analytics integrations.

Almost 120,000 Vimeo accounts exposed in ShinyHunters data Breach. Published 11 hours ago Cybersecurity Writer Summarize with: Key Takeaways * Extortion campaign listing: In April 2026, ShinyHunters listed Vimeo on its portal, publishing hundreds of gigabytes of enterprise data. * Third-party compromise: Vimeo attributed the data exposure to a security breach at its third-party analytics vendor, Anodot. * Data exposure scope: The leak exposed almost 120,000 email addresses but contained no user credentials, payment information, or video content. In April 2026, the ShinyHunters extortion group targeted Vimeo as part of its ongoing "pay or leak" campaign, listing the video hosting platform on their extortion portal and subsequently publishing hundreds of gigabytes of data. Breach notification platform Have I Been Pwned (HIBP) added the leaked data on May 5, 2026, confirming that almost 119,200 unique email addresses were involved in the April 2026 breach. Scope of the data exposure. The HIBP dataset predominantly consists of video titles, technical data, and platform metadata. However, the exposure also impacts user data - email addresses, with some records accompanied by user names. Following the data publication, Vimeo issued a statement clarifying the boundaries of the security incident. The company investigated the incident and attributed the data exposure directly to a security breach at Anodot, a third-party analytics vendor. ShinyHunters claimed it compromised Snowflake and BigQuery instances, extracting significant volumes of information from the vendor's infrastructure rather than Vimeo's primary internal systems. Operational security impact. Vimeo stated the compromised information does not include any actual Vimeo video content. Furthermore, the exposure did not compromise valid user login credentials or any financial payment card information. Organizations utilizing third-party analytics vendors must continue auditing supply chain access to secure operational metadata and user contact information. ShinyHunters last month released 78.6 million internal analytics records, reportedly from a confirmed Rockstar Games data breach linked to Anodot and also listed a Udemy data breach. Other breaches claimed by the threat actor last month include Hallmark and Hallmark+ and a Cisco breach linked to a Trivy compromise.