ShinyHunters claims 119K Vimeo emails in the wild

https://image.theregister.com/5227770.jpg?imageId=5227770&panox=0&panoy=0&panow=0&panoh=0&width=1200&height=683

Vimeo points finger at analytics supplier Anodot, says no logins or card data were touched

More than 119,000 Vimeo users's email addresses were extracted in a breach traced to a third-party analytics vendor, according to Have I Been Pwned.

The incident first surfaced in April when the ShinyHunters crew added Vimeo to its growing "pay or leak" hit list, claiming it had pulled hundreds of gigabytes of data and threatening to dump the lot unless a deal was struck.

That dump has since landed, and breach notification service Have I Been Pwned now puts a number on at least part of the fallout: 119,000 unique email addresses, in some cases paired with names.

Vimeo last week confirmedthat data was taken, but stopped short of saying how many people were affected. The company pinned the incident on Anodot, a third-party analytics provider used across its systems, and said the...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE