Udemy — data breach (Udemy)

Domain: udemy.com · Accounts affected: 1,401,259 · Data exposed: Email addresses, Employers, Job titles, Names, Payment methods, Phone numbers, Physical addresses · Verified breach — In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.