Vimeo confirmed a data breach stemming from an incident at its third-party anomaly detection provider, Anodot. The ShinyHunters extortion group accessed Vimeo user and customer data, including email addresses, technical data, video titles, and metadata, threatening to leak it by April 30.
Initial Access
Anodot Compromise
confirmed
Threat actors, linked to ShinyHunters, gained unauthorized access to Anodot's systems, stealing authentication tokens.
Defender cut points
Implement robust third-party risk management and continuous security assessments for all vendors.Enforce strong access controls and least privilege for third-party integrations.
