ShinyHunters claims dump puts 119K Vimeo emails in the wild
Over 119,000 Vimeo user email addresses were exposed in a data breach linked to a third-party analytics vendor, Anodot. Vimeo confirmed the breach but stated that no login credentials or payment information were compromised. The data, reportedly dumped by hacking group ShinyHunters, includes email addresses, names, and technical metadata.
- ▪More than 119,000 unique Vimeo user email addresses were exposed in the breach.
- ▪Vimeo attributed the incident to Anodot, a third-party analytics provider, not a direct breach of its systems.
- ▪No valid login credentials, video content, or payment card data were included in the stolen data.
- ▪ShinyHunters claimed responsibility and threatened to leak the data unless a ransom was paid.
- ▪The breach originated on or around April 4, according to Anodot's status page.
Opening excerpt (first ~120 words) tap to expand
Cyber-crime ShinyHunters claims dump puts 119K Vimeo emails in the wild Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched Carly Page Tue 5 May 2026 // 12:15 UTC More than 119,000 Vimeo users's email addresses were extracted in a breach traced to a third-party analytics vendor, according to Have I Been Pwned. The incident first surfaced in April when the ShinyHunters crew added Vimeo to its growing "pay or leak" hit list, claiming it had pulled hundreds of gigabytes of data and threatening to dump the lot unless a deal was struck. That dump has since landed, and breach notification service Have I Been Pwned now puts a number on at least part of the fallout: 119,000 unique email addresses, in some cases paired with names.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at The Register.