Vimeo: Cyber gang ShinyHunters posts data to the dark web

The criminal group ShinyHunters also copied data from Vimeo during their breach at service provider Anodot. As the company apparently did not respond to the extortion attempt, the cyber gang is now making the obtained data available for free download on the dark web.

Early Wednesday, the entry on ShinyHunters' dark web leak site still stated that Vimeo had only a short time to respond to the extortionists. On Thursday of this week, the entry now shows a download link for the data.

Vimeo admits data leak

Vimeo has meanwhile admitted the IT security incident on the company's website. According to this, Vimeo is aware of the breach at analytics service provider Anodot. An unauthorized actor has thus accessed certain Vimeo user and customer data. According to the current state of investigation, the databases essentially contain technical data, video titles, and metadata, as well as, in some cases, customer email addresses. However, no Vimeo video content, valid user credentials, or payment information are included.

According to this, Vimeo's user and customer login data is secure. The incident also caused no interruptions or disruptions to systems or services. When Vimeo became aware of the IT incident, the company deactivated all Anodot access credentials, removed Anodot's integration into Vimeo systems, and engaged external IT security experts to investigate the incident. The company has also informed law enforcement. The investigations are reportedly ongoing.

At service provider Anodot, the criminal organization ShinyHunters has exfiltrated data from several companies. For example, the fashion chain Zara is also affected; here too, the perpetrators have posted the data on the dark web.

(dmk)