ShinyHunters exploit Anodot incident to target Vimeo

Vimeo confirmed that a breach of third-party analytics vendor Anodot led to unauthorized access to Vimeo metadata, video titles and some customer emails; attackers claiming to be ShinyHunters say they used stolen Anodot authentication tokens to access Snowflake and BigQuery instances and are extorting Vimeo with threats to leak data by April 30, 2026. Vimeo has disabled Anodot credentials, removed the integration, notified law enforcement, and engaged external security experts to investigate.