Vimeo data breach exposes personal information of 119,000 people
2026-05-05T13:23:32Z•986c01431514f9586171f18fff592bb5617aa7cece01ee460c0143ec7fe19b11
APT37Amazon-SESAndroidBirdCallCloudZInstructureMOVEit-Automation warningPhenoPyPIRATScarCruftShinyHuntersTrellixVimeoWeaver-E-cologycredential-stealerdata-breachextortionmalwaremicrosoft-phone-linkotp-theftphishingpytorch-lightningsource-code-breachsupply-chain
What happened
Multiple high-impact incidents and active exploits were reported: the ShinyHunters gang stole personal data from Vimeo (≈119,000 records) and claimed an attack on Instructure, while Trellix disclosed a source-code repository breach. Active malware and espionage activity includes CloudZ RAT using a new Pheno plugin to hijack Microsoft Phone Link and steal SMS/OTPs, ScarCruft/APT37 delivering BirdCall Android backdoors via a game-platform supply-chain, and a backdoored PyTorch Lightning package on PyPI that drops a credential stealer. Critical vulnerabilities are being exploited in the wild — e.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 986c01431514f9586171f18fff592bb5617aa7cece01ee460c0143ec7fe19b11
- Enrichment time
- 2026-05-05T13:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.