Udemy Data Breach: 1.4M Accounts Exposed by ShinyHunters

Online training giant Udemy suffered a significant data breach in April 2026, stemming from a “pay or leak” extortion attempt by the notorious ShinyHunters group. The attackers publicly leaked the stolen data after the extortion failed, exposing sensitive information from over 1.4 million customer and instructor accounts.

Have I Been Pwned confirmed that the compromised dataset includes unique email addresses, full names, physical addresses, and phone numbers. For instructors, the breach went deeper, exposing employer information and critical payout methods such as PayPal, cheque, and bank transfer details. This is not just email addresses; it’s a full identity profile for many victims.

This incident highlights the persistent threat of extortion-motivated attacks and the severe consequences when organizations refuse to pay. The public release of such comprehensive data sets creates a long-term risk for individuals, enabling sophisticated phishing, identity theft, and financial fraud targeting both Udemy users and instructors.