Breachesby GlyphUdemy
Disclosed Apr 26, 20261,401,259 accountsUnverified
In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.
What is known
| People affected | 1,401,259 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 26, 2026 |
| Happened | Apr 24, 2026 |
| Attack | Extortion |
| Data exposed | EmailsEmploymentNamesPayment cardsPhone numbersAddresses |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.