Vimeo
Disclosed Apr 27, 20265 months ago119,167 accountsConfirmed
Vimeo confirms Anodot-linked breach, 119,200 users' data leaked
Vimeo said attackers used compromised Anodot credentials to access databases holding technical data, video titles and metadata, and some customer emails. ShinyHunters leaked 106 GB, which Have I Been Pwned tied to 119,200 people.
What is known
| People affected | 119,167 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 27, 2026 |
| Happened | Apr 28, 2026 |
| Attack | Vendor breach |
| Data exposed | Emails, Names, Other |
| Sector | Media · US |
| Status | Confirmed |
| Part of | Anodot (2026) |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Vimeohaveibeenpwned.com · Aggregator | Aggregator |
| Vimeo disclosurevimeo.com · The organization | The organization |
| Video service Vimeo confirms Anodot breach exposed user datableepingcomputer.com · News | News |
| Vimeo data breach exposes personal information of 119,000 peoplebleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Apr 27 | |
| Have I Been Pwnedaccounts in the data | May 5 | 119,167 |
Same campaign
| Organization | Affected | ||||
|---|---|---|---|---|---|
| May 84 months ago | Vendor breach | Retail | Unverified | 197Kacct | |
| Apr 135 months ago | Vendor breach | Gaming | Unverified | Unknown | |
| Apr 135 months ago | Supply chain | Data brokers | Unverified | Unknown |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Vimeo to https://www.bleepingcomputer.com/news/security/video-service-vimeo-confirms-anodot-breach-exposed-user-data/ · seed source
- 2026-09-25 · campaign: empty to anodot-2026 · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to media · seed source
- 2026-09-25 · data_types: ["emails","names"] to ["emails","names","other"] · seed source
- 2026-09-25 · disclosed: 2026-05-05 to 2026-04-27 · seed source
- 2026-09-25 · summary: In April 2026, the ShinyHunters extortion group listed Vimeo on their extortion portal as part of their "pay or leak" campaign . They subsequently published hundreds of gigabytes of data, predominantly consisting of video titles, technical to Vimeo said attackers used compromised Anodot credentials to access databases holding technical data, video titles and metadata, and some customer emails. ShinyHunters leaked 106 GB, which Have I Been Pwned tied to 119,200 people. · seed source
- 2026-09-25 · title: empty to Vimeo confirms Anodot-linked breach, 119,200 users' data leaked · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.