Vimeo has confirmed that hackers have stolen user and customer data following an attack involving a third-party vendor.