Animoto, a cloud-based video creation platform used by millions of consumers and small businesses, suffered a data breach in July 2018 due to a misconfiguration that exposed approximately 25 million user records. The breach was discovered to have resulted in stolen data being placed for sale on dark web markets. No external attacker group has been publicly attributed. The exposed data included email addresses, full names, dates of birth, geographic locations, and salted password hashes. That combination is particularly sensitive: dates of birth paired with passwords increase the risk of account takeover, and the profile is detailed enough to support targeted phishing or impersonation attacks against affected individuals and their businesses. Animoto notified affected users and forced password resets following the breach. No class-action settlement or regulatory enforcement action has been publicly documented in connection with this incident. Affected users who reused their Animoto password on other accounts remain at risk of credential-based attacks and should treat any account sharing that password as compromised.

Cloud-based creative platforms collect user accounts, emails, passwords, payment-adjacent data, and project-related records tied to video creation and publishing workflows.

Animoto continues to operate as a video creation platform. The company has faced increasing competition from video creation tools embedded in social media platforms and broader design tools. No major organizational changes have been prominently reported in the recent period.