---
title: "ShinyHunters claims dump puts 119K Vimeo emails in the wild"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/285205138.md"
description: "ShinyHunters has leaked over 119,000 email addresses of Vimeo users due to a breach linked to a third-party analytics vendor, Anodot. The breach, first reported in April, involved the extraction of data, including email addresses and technical information, but no video content or payment details were compromised. Vimeo confirmed the incident and has since severed ties with Anodot, while the investigation continues. The leaked emails pose a risk for phishing attacks, highlighting vulnerabilities in vendor security."
datetime: "2026-05-05T12:18:36.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/285205138.md)
  - [en](https://longbridge.com/en/news/285205138.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/285205138.md)
---

# ShinyHunters claims dump puts 119K Vimeo emails in the wild

More than 119,000 Vimeo users's email addresses were extracted in a breach traced to a third-party analytics vendor, according to Have I Been Pwned.

The incident first surfaced in April when the ShinyHunters crew added Vimeo to its growing "pay or leak" hit list, claiming it had pulled hundreds of gigabytes of data and threatening to dump the lot unless a deal was struck.

That dump has since landed, and breach notification service Have I Been Pwned now puts a number on at least part of the fallout: 119,000 unique email addresses, in some cases paired with names.

Vimeo last week confirmed that data was taken, but stopped short of saying how many people were affected. The company pinned the incident on Anodot, a third-party analytics provider used across its systems, and said the attacker gained access via that integration rather than breaking into Vimeo directly.

Anodot has not said anything publicly, but its status page shows the incident kicked off on April 4.

According to Vimeo, the stolen databases were heavy on technical data, video titles, metadata, and some customer email addresses. The company has been keen to stress what was not included: no actual video content, no valid login credentials, and no payment card information.

That does not make the data harmless. Email lists like this get reused, resold, and recycled into phishing runs for years, especially when they come with enough context to make a message look convincing.

-   ESA calls cops as crims lift off 500 GB of files, say security black hole still open
-   Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005
-   Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak
-   Brace for the patch tsunami: AI is unearthing decades of buried code debt

The attackers, for their part, claim the breach went deeper. In a post seen by _The Register_, ShinyHunters alleged that "Snowflake and BigQuery instances data was compromised thanks to Anodot.com," adding that the company "failed to reach an agreement" despite multiple attempts to negotiate.

Vimeo says it has cut off the problem at the source, disabling Anodot credentials, ripping out the integration, and bringing in outside security help while notifying law enforcement. The investigation is ongoing, and the company says it will update customers as it learns more.

For now, the numbers from Have I Been Pwned seem to fill in the gap left by Vimeo's initial disclosure, and underline a familiar problem: you can lock down your own systems, but your vendors only have to slip once. ®

### Related Stocks

- [VMEO.US](https://longbridge.com/en/quote/VMEO.US.md)
- [PBI.US](https://longbridge.com/en/quote/PBI.US.md)
- [SNOW.US](https://longbridge.com/en/quote/SNOW.US.md)
- [PBI-B.US](https://longbridge.com/en/quote/PBI-B.US.md)

## Related News & Research

- [Vimeo owner Bending Spoons prices IPO at above target range to raise $1.68 billion](https://longbridge.com/en/news/291347850.md)
- [Trump's DOT Introduces Changes to 'Accelerate' AV Deployment, Directs NHTSA to Grant Zoox Temporary Exemption](https://longbridge.com/en/news/294463830.md)
- [Friend re-launches its AI pendant with a speaker that talks to you, for twice the price](https://longbridge.com/en/news/294394405.md)
- [Florida plans to build air taxi pads using $200M intended for EV chargers](https://longbridge.com/en/news/294403102.md)
- [09:01 ETTAO Clean Turns Its Award-Winning Toothbrush Into a Design Statement With the Launch of the Studio Series](https://longbridge.com/en/news/294371195.md)