Video service Vimeo confirms Anodot breach exposed user data
2026-04-28T19:23:32Z•273c37264b263c1d068335aa62db5984ce94185388ddaf8f10b092857b4452f0
ADTAnodotCheckmarxGlassWormLAPSUSOpenVSXPyPIScattered SpiderShinyHuntersVimeodata-breachextortioninfostealerlaw-enforcementmalwarephishingsms-stingraysoftware-repository-tamperingsupply-chain-compromisethreat-actor-groups
What happened
Multiple high-impact incidents and threats were reported: Vimeo confirmed user/customer data was exposed after the Anodot breach; Checkmarx said the LAPSUS$ group leaked stolen private GitHub data; ShinyHunters leaked personal data for 5.5 million ADT customers; a malicious PyPI release of the popular elementary-data package (≈1.1M monthly downloads) pushed an infostealer; and the GlassWorm campaign resurfaced via 73 malicious "sleeper" OpenVSX extensions. Law enforcement and legal actions were noted — a suspected Scattered Spider affiliate was charged in the U.S. after arrest in Finland, and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 273c37264b263c1d068335aa62db5984ce94185388ddaf8f10b092857b4452f0
- Enrichment time
- 2026-04-28T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.