Udemy
Data Breach
www.udemy.com1,419,218
Records Exposed
Apr 2026
Date of Breach
Database
Breach Type
Sep 2026
Added to Database
About This Breach
In April 2026, the online learning platform Udemy was affected by a data breach as part of the ShinyHunters extortion campaign targeting Salesforce environments. The breach exposed approximately 1.4 million records (around 1.4 million unique email addresses), including email addresses, first and last names, phone numbers, job titles, employer and company information and physical mailing addresses belonging to Udemy business customers, instructors and enterprise learners. The data was exported from the Udemy Salesforce CRM (customer and contact objects) along with internal learning and billing extracts. No passwords were included. The records were published on the ShinyHunters data leak site and distributed via Telegram after Udemy did not pay the ransom.
Compromised Data Types
Country
United States
Language
English
Category
Education
Indexed On
Sep 28, 2026
Breach Type
Database
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
- Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the Udemy breach and 12,000+ other known breaches.