Vimeo Confirms User and Customer Data Breach

""The data accessed does not include Vimeo video content, valid user login credentials, or payment card information," the company said. "Vimeo user and customer login credentials are secure. This incident did not cause any disruption to our systems or service.""

""We've taken steps to secure our environment and continue to monitor the situation closely," a Vimeo spokesperson told SecurityWeek."

""ShinyHunters has taken credit for the Vimeo hack, claiming to have obtained data from the company's Snowflake and BigQuery instances. The group is threatening to leak stolen files unless a ransom is paid.""

Vimeo experienced a data breach where hackers accessed user and customer data through a third-party vendor, Anodot. The compromised data includes technical information, video titles, metadata, and some email addresses. Vimeo assured that no video content, user login credentials, or payment information was accessed. The company has disabled Anodot credentials and removed its integration. ShinyHunters claimed responsibility for the attack, threatening to leak stolen files unless a ransom is paid. The investigation is ongoing, and law enforcement has been notified.

Read at SecurityWeek