Breach Disclosure: Animoto

Animoto, a cloud-based video creation service, suffered a data breach in or around July 2018. Exposed data includes names, birth dates, email addresses, and salted and hashed passwords. Total, 22 million unique email addresses were exposed.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

Animoto, a video editing and creation site for social media platforms, experienced a data breach in July 2018. Details surrounding the breach are unclear, however, the company claimed they noticed "suspicious activity" in their systems, which may have led to the breach. In response, the company notified all 22 million users holding accounts, forced a reset of employee passwords, and reduced employee access to critical systems.