The threat actor group ShinyHunters has claimed to have compromised data belonging to Vimeo, alleging access to the company’s Snowflake and BigQuery environments through a third-party provider.
The claim was posted April 29, 2026 as part of the group’s ongoing campaign targeting multiple organizations with “pay or leak” extortion tactics. The authenticity and scope of the alleged breach have not been independently verified.
Third-party compromise alleged through Anodot
According to the post, ShinyHunters claims the data was obtained via Anodot, a third-party analytics platform. The group alleges that Vimeo’s Snowflake and BigQuery instances were exposed as a result of this access.
No technical evidence or sample data was publicly provided in the listing to substantiate the claim. The exact nature of the data, including whether it involves customer, user, or internal records, remains unclear. :contentReference[oaicite:0]{index=0}
Limited detail lowers confidence in claim
Unlike other recent ShinyHunters posts involving organizations such as Udemy and ADT, the Vimeo listing contains minimal supporting detail.
No record counts, data descriptions, or verification samples were included, making it difficult to assess the credibility or scale of the alleged compromise.
Part of broader Snowflake-related targeting trend
The reference to Snowflake infrastructure aligns with a broader pattern of claims involving cloud data platforms. ShinyHunters has recently linked multiple alleged breaches to third-party access or misconfigured cloud environments, including incidents involving enterprise analytics and SaaS providers.
BreachNews has previously reported on similar claims tied to third-party exposure, including Salesforce-related datasets and other cloud-based data platforms.
No confirmation from Vimeo
Vimeo had not issued any public statement at time of publication regarding the alleged breach or the claims made by ShinyHunters.
Given the lack of supporting evidence and detail, the claim should be treated as unverified. It remains unclear whether the data represents a legitimate compromise, aggregated information, or an attempt to pressure the company into negotiations.
