Vimeo Data Breach Exposes Personal Information of 119,000 People

Biggest Cyber Attacks, Data Breaches, Ransomware Attacks of May 2026 May 2026 delivered yet another resounding reminder that no organisation is immune to cyber threats. From attacks impacting major technology providers and healthcare institutions to incidents affecting transportation, media, and manufacturing organisations, threat actors continued to demonstrate their ability to exploit weaknesses across diverse sectors.  This month's most significant cyber incidents include breaches and attacks involving Instructure, Mediaworks, Taiwan High Speed Rail Corporation (THSRC), OpenAI, Grafana, NYC Health + Hospitals, Trellix, Vimeo, and Foxconn. Vulnerabilities Discovered and Patches Released Advisories issued, reports, analysis etc. in May 2026 Collectively, these incidents highlight several key trends shaping today's threat landscape, including supply chain risks, ransomware and extortion campaigns, attacks against critical infrastructure, third-party vulnerabilities, and the growing challenges posed by increasingly sophisticated threat actors. As organisations become more interconnected and reliant on cloud platforms, SaaS services, and complex digital ecosystems, the consequences of a cyber incident continue to grow. The good news is that many of these risks can be mitigated through proactive preparation. By investing in robust cyber incident response plans , scenario-specific playbooks, cyber tabletop exercises , executive cyber crisis training, and regular cyber resilience assessments, organisations can significantly improve their ability to prevent, detect, respond to, and recover from cyber incidents. At Cyber Management Alliance, we help organisations build these capabilities through our NCSC Assured training programmes, cyber incident response services, cyber drills, tabletop exercises, incident response playbook review and creation  and executive resilience training. Our complete suite of services enables businesses to stay ahead of the evolving cyber threat landscape and reduce the likelihood and impact of future attacks in 2026. Ransomware group claims breach of pro-Orbán Hungarian media firm Hungarian media company Mediaworks confirmed that attackers stole and leaked nearly 8.5 TB of internal data, including payroll records, contracts, financial files, and internal communications, exposing sensitive business information and creating serious operational and reputational risks. Ransomware attack on Hungarian media firm pro-Orbán Foxconn confirms cyber attack after Nitrogen claims Apple, Nvidia data theft Foxconn confirmed a cyber attack after the Nitrogen ransomware gang claimed it had stolen sensitive files linked to Apple and NVIDIA projects, raising concerns over supply-chain exposure, intellectual property theft, and potential operational disruption within one of the world’s largest electronics manufacturing networks. West Pharma ransomware attack disrupts operations West Pharmaceutical suffered a ransomware attack that encrypted systems and stole data, forcing the company to shut down portions of its global network and disrupting manufacturing, shipping, and supply-chain operations critical to pharmaceutical and biotech customers worldwide. Grafana refuses to pay ransom after codebase theft Grafana Labs confirmed that attackers stole portions of its internal codebase during a supply-chain related breach, but the company refused to pay the ransom demand, raising concerns over potential source code exposure, downstream software integrity risks, and further exploitation attempts targeting customers and developers. Trellix source code breach - Hackers gain unauthorised access to repository Trellix disclosed that attackers gained unauthorised access to part of its internal source code repository, exposing sensitive proprietary code and creating potential supply-chain and vulnerability discovery risks, although there was no evidence of product tampering or customer impact. Instructure confirms data breach, ShinyHunters claims attack Instructure confirmed that attackers stole data from its systems in a cyber attack, potentially exposing information tied to its Canvas learning platform and thousands of educational institutions, raising concerns over student and staff data privacy. Later, reports suggested that Instructure most likely paid a ransom to the cyber criminals. Vimeo data breach exposes personal information of 119,000 people Vimeo’s breach exposed the personal data of over 119,000 users, including names and email addresses, after attackers exploited a third-party analytics provider, increasing the risk of phishing, impersonation, and targeted fraud against affected users. Zara data breach exposed personal information of 197,000 people the April 2026 Dark Web Breach Incident Trend Report is compiled from data breach cases posted on the deep web and dark web forums. some information is included in cases where it is difficult to fully verify the factuality of the information due to the nature of the source. data breaches and sales of initial access to military, government, financial, technology, healthcare, and energy sectors were widely observed on major dark web forums BreachForums (run by Hasan), DarkForums, Exploit, Spear, and PwnForums. ShinyHunters have claimed Data breaches against multinational organizations such as Vimeo Inc., 7-Eleven, ADT Inc., Alert 360, Udemy Inc., Zara, and others, while Cisco source code leaks and internal Telegram group chat data sharing have been observed. high-risk breaches involving military, government, and intelligence organizations were also highlighted. data from China’s People’s Liberation Army (PLA), Iran’s IRGC surveillance system and police databases, Taiwan’s military and cyber security data, Boeing’s SLS and Artemis-related data, Virginia-class submarine technical data, and initial access to firewalls for US aerospace and defense companies were traded or shared. in the South Korea Region, KAAC data, which purports to be an academic organization, was shared on DarkForums, and data related to the Family Federation for World Peace and Unification (Unification Church) was sold. vM Horizon access for an insurance company in the Korea Region was also observed being sold on Spear. The Dedale Office’s claimed breach of shared childcare and community education data was determined to be a fake AI-generated sample data, making it difficult to determine if it was a real breach. the technology, financial, and platform sectors also saw breaches. Data or source code from Blue Origin, Vercel Inc., Coinbase Global Inc., SoundCloud, Polymarket, Jaguar Land Rover Automotive PLC, and Cisco were sold or shared on forums. in the Middle East, Data from TAMM, Taif City e-Government Platform, 1Pass LLC’s CRM Panel data, Riyadh Chamber of Commerce & Industry, and talabat were traded. in Asia, Oceania and the Others Region, Japanese Driver’s License-Personal Data, Mynavi Corporation Personal Data, Singaporean Citizen Data, Agoda Malaysia Customer Data, Elite Cloud Pte. Ltd. data, Beijing Yuansxin Pharmacy Technology Co., Ltd. (Miaoshou Doctor) Data, and card data from Australia and Denmark.

Shadow Tier lists May 5, 2026 as the signal date.

Vimeo is the organization connected to this public signal.

This signal is connected to current ransomware incidents based on its reported incident context.

This signal is connected to data exposure and breach intelligence based on its reported consequences.