Video internet hosting platform Vimeo has confirmed that hackers have stolen consumer and buyer information following an assault involving a third-party vendor.
In line with Vimeo, hackers accessed databases containing technical information, video titles and metadata, and the e-mail addresses of some prospects.
“The info accessed doesn’t embody Vimeo video content material, legitimate consumer login credentials, or cost card info,” the corporate stated. “Vimeo consumer and buyer login credentials are safe. This incident didn’t trigger any disruption to our techniques or service.”
Vimeo stated the attackers focused the Anodot analytics platform. Following the incident, Anodot credentials have been disabled and integration with Vimeo techniques has been eliminated.
The investigation is ongoing and regulation enforcement has been notified.
“We’ve taken steps to safe our surroundings and proceed to watch the scenario intently,” a Vimeo spokesperson informed information.killnetswitch.
ShinyHunters has taken credit score for the Vimeo hack, claiming to have obtained information from the corporate’s Snowflake and BigQuery situations. The group is threatening to leak stolen recordsdata except a ransom is paid. The corporate has been given till April 30 to reply.
The cybercrime group has been focusing on organizations’ Salesforce situations and different broadly used companies.
On the time of writing, the ShinyHunters web site lists three organizations allegedly focused by way of Anodot: Vimeo, Rockstar Video games, and vogue retail big Zara.
