Udemy
Disclosed Apr 26, 20265 months ago1,401,259 accountsUnverified
In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.
What is known
| People affected | 1,401,259 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 26, 2026 |
| Happened | Apr 24, 2026 |
| Attack | Extortion |
| Data exposed | Emails, Employment, Names, Payment cards, Phone numbers, Addresses |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Udemyhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Apr 26 | 1,401,259 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.