Vimeo Confirms Data Breach After Hackers Access User Database

Vimeo confirmed a supply-chain data breach stemming from unauthorized access to its third-party analytics provider Anodot, attributed to the ShinyHunters group; exposed items include technical data, video titles/metadata and a subset of customer email addresses, while passwords and payment data were not accessed. Vimeo removed the Anodot integration, revoked related credentials, engaged external forensics, and notified law enforcement, warning users of increased phishing and social-engineering risk.