Vimeo Confirms Data Breach

Cybersecuritynews •Abinaya • April 29, 2026

Video hosting platform Vimeo has confirmed a data breach resulting in unauthorized access to its user database. The security incident stems from a compromise at Anodot, a third-party analytics vendor utilized by Vimeo and several other major organizations. This event highlights the escalating threat of supply chain attacks within the software-as-a-service (SaaS) ecosystem. The breach […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vimeo Data Breach Linked to Anodot Incident by ShinyHunters Gang Vimeo has confirmed a data breach resulting from a security incident at Anodot, a third-party analytics vendor. The breach, attributed to the ShinyHunters hacking group, exposed user email addresses, technical data, video titles, and metadata. Vimeo stated that no user login credentials, payment information, or video content were compromised. The ShinyHunters group is demanding a ransom to prevent the public release of the stolen data, threatening to leak it by April 30, 2026. Vimeo has disabled all Anodot credentials, removed its integration with the service, and is cooperating with law enforcement and third-party security experts for further investigation. The total number of affected users remains unclear, but Vimeo has approximately 287 million registered users. This incident follows a pattern of ShinyHunters targeting cloud-based services to access sensitive data. The breach highlights ongoing vulnerabilities in third-party integrations. 12 sources 52

Extracted Entities

Vimeo Confirms Data Breach

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)