Udemy: a data breach
In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.
The record
- Organisation
- Udemy →
- Identity
- Udemyidentified by its domain in a verified breach record
- Records affected
- 1,401,259 records
- Data exposed
- Email addresses, Employers, Job titles, Names, Payment methods, Phone numbers, Physical addresses
- Sector
- Not recorded
- Occurred
- 2026-04-24
- Disclosed
- 2026-04-26
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Udemy, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-04-26