Vimeo Data Breach Exposes 119,000 Users
Vimeo, a major video hosting service, confirmed a data breach affecting 119,000 users and customers. The breach was linked to an Anodot analytics company hack, which allowed ransomware group ShinyHunters to access connected customer clouds. The incident highlights concerns about delegated trust and cloud security.
Key points
- Vimeo, a video hosting service, confirmed a data breach affecting 119,000 users and customers.
- The breach was linked to an Anodot analytics company hack, which allowed ransomware group ShinyHunters to access connected customer clouds.
- ShinyHunters exfiltrated OAuth tokens and API keys from Anodot, enabling them to log directly into customer clouds.
- The incident affected dozens of companies, including Rockstar Games, which had its internal analytics and reporting data exposed on the dark web.
- Vimeo user metadata, including technical information, was compromised in the breach.
A recent data breach at Vimeo, a major video hosting service, has exposed the sensitive information of 119,000 users and customers. The breach was linked to an Anodot analytics company hack, which allowed ransomware group ShinyHunters to access connected customer clouds.
The incident highlights concerns about delegated trust and cloud security. Anodot's product requires direct access to its customers' cloud data sources, which can create vulnerabilities if not properly secured. ShinyHunters exploited this vulnerability to exfiltrate OAuth tokens and API keys from Anodot, enabling them to log directly into customer clouds.
The breach affected dozens of companies, including Rockstar Games, which had its internal analytics and reporting data exposed on the dark web. Vimeo user metadata, including technical information, was also compromised in the breach.
The incident serves as a reminder of the importance of robust cloud security measures and the need for companies to prioritize the protection of their customers' sensitive information.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.