Last Update: 09/22/2026 at 11:34 PM EST

Vimeo Data Exposed Through Anodot

Coverage from Rescana, Cloaked, and others

Vimeo Data Exposed Through Anodot topic image

Vimeo disclosed that attackers accessed user and customer data through compromised credentials and integrations at third-party analytics provider Anodot.

The exposed material primarily included video titles, technical metadata, and about 119,000 to 119,200 email addresses, while Vimeo said uploaded video content, valid login credentials, payment card data, and platform operations were not affected. ShinyHunters reportedly used the stolen data in an extortion campaign and later published a large archive, increasing the risk of phishing and account misuse.

Looking Back
17 Day Timeline
Apr 28May 1May 4May 8May 11May 14
All Articles5 articles
Important3 articles · CI Score 60 and above
Rescana
Vimeo disclosed an April 2026 breach after Anodot compromise enabled ShinyHunters to use stolen tokens to access Vimeo Snowflake and BigQuery, exposing email and video metadata.
5/6/2026 • Data Breaches & Exposure Events • General
Cloaked
Vimeo reported April 2026 unauthorized access linked to compromised Anodot integration credentials, with later reporting indicating exposure of Vimeo user email addresses.
5/14/2026 • Data Breaches & Exposure Events • General
Have I Been Pwned
ShinyHunters extortion group published Vimeo data in April 2026, including 119,000 email addresses, after Vimeo attributed the underlying breach to analytics vendor Anodot.
5/5/2026 • Data Breaches & Exposure Events • General
Interesting2 articles · CI Score 45–59
BleepingComputer / Sergiu Gatlan
Vimeo reported an unauthorized access incident linked to Anodot, exposing email addresses for about 119,200 people, after which ShinyHunters leaked a dark-web archive.
5/5/2026 • Data Breaches & Exposure Events • General
The Record / Jonathan Greig
Vimeo said an Anodot vendor breach exposed certain Vimeo customer data while Shinyhunters posted the company on a leak site in a ransom threat timeline.
4/28/2026 • Data Breaches & Exposure Events • General