Vimeo Confirms Data Breach After Hackers Access User Database

Gbhackers •Divya • April 29, 2026

Vimeo has officially confirmed a data breach affecting its user database. The security incident did not originate with Vimeo, but rather with Anodot, a third-party analytics vendor used by the video hosting platform. This event highlights the ongoing risks associated with software supply chains, where a vulnerability in one vendor can compromise multiple downstream companies. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vimeo Data Breach Linked to Anodot Incident by ShinyHunters Gang Vimeo has confirmed a data breach resulting from a security incident at Anodot, a third-party analytics vendor. The breach, attributed to the ShinyHunters hacking group, exposed user email addresses, technical data, video titles, and metadata. Vimeo stated that no user login credentials, payment information, or video content were compromised. The ShinyHunters group is demanding a ransom to prevent the public release of the stolen data, threatening to leak it by April 30, 2026. Vimeo has disabled all Anodot credentials, removed its integration with the service, and is cooperating with law enforcement and third-party security experts for further investigation. The total number of affected users remains unclear, but Vimeo has approximately 287 million registered users. This incident follows a pattern of ShinyHunters targeting cloud-based services to access sensitive data. The breach highlights ongoing vulnerabilities in third-party integrations. 12 sources 52

Extracted Entities

Vimeo Confirms Data Breach After Hackers Access User Database

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)