Video service Vimeo confirms Anodot breach exposed user data

Vimeo disclosed that, following the Anodot breach, an unauthorized actor accessed certain Vimeo user and customer data (primarily technical data, video titles and metadata, and in some cases customer email addresses). The breach was claimed by the extortion group ShinyHunters, which listed Vimeo on its portal and threatened to publish stolen data unless paid; Vimeo has disabled Anodot credentials, removed the integration, engaged third-party security experts, and notified law enforcement. Vimeo states no uploaded video content, account credentials, or payment card information were exposed and platform operations were unaffected.