Vimeo Says Anodot Breach Exposed Metadata and Some Customer Emails
Summary
Vimeo says an unauthorized actor accessed technical data, video titles, metadata and some customer emails through a breach at analytics vendor Anodot. Vimeo says credentials, payment data and video content were not accessed; its investigation continues.
Key points
- Vimeo says the access occurred through analytics vendor Anodot, not its internal systems.
- Accessed data primarily included technical data, video titles and metadata, and in some cases customer email addresses.
- Vimeo says video content, login credentials and payment card information were not accessed.
- Vimeo severed Anodot integrations and disabled related credentials.
- Vimeo engaged third-party security experts, notified law enforcement and says its investigation is ongoing.
- A threat actor tracked by Google Threat Intelligence claimed responsibility for the unauthorized access at Anodot.
Article Details
- Victim Organization
- Vimeo
- Incident Type
- Third-party supply-chain data breach involving unauthorized access to Vimeo user and customer data through analytics vendor Anodot.
- Data Types Exposed
- Technical data
- Video titles and metadata
- Some customer email addresses
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Vimeo reported no disruption to its systems or daily services. It said its internal systems, video content, login credentials, and payment card information were not accessed. Vimeo severed Anodot integrations and disabled related credentials; its investigation is ongoing.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed