The ShinyHunters extortion group has claimed a breach of the Udemy e-learning platform, allegedly compromising over 1.4 million records including personally identifiable information and internal corporate files. The group is threatening to publish the data unless a ransom is paid, putting victims at high risk of financial fraud and phishing campaigns. This incident is part of a broader campaign by ShinyHunters targeting multiple high-profile organizations.
Data Security Udemy allegedly breached by ShinyHunters, data leak warned April 28, 2026 Share By SC Staff (Adobe Stock) Cybernews reports that U.S-based. e-learning platform Udemy was claimed to have more than 1.4 million records compromised by the ShinyHunters extortion group , which threatened to expose the data trove should the firm opt out of negotiations by Apr. 27. "Since there is no published dataset yet, we can only guess what exact data was obtained," said Cybernews researcher Rasa Jurgutyte. However, with ShinyHunters alleging the theft of personally identifiable information and internal corporate files, victims are at a high risk of facing financial fraud and phishing email compromise. Approximately 77 million e-learners have enrolled in Udemy in 2024. It also recently signed a merger with another e-learning firm Coursera. The platform joins the list of high-profile firms breached by ShinyHunters in the past weeks. The operation previously claimed breaches on security system provider Alert 360, Ameriprise Financial, Hallmark, Zara, the European Commission, Amtrak, and Rockstar Games, Carnival, Zara, Mytheresa, and 7-Eleven. SC Staff Related Security Operations French police arrest hacker ‘HexDex’ for alleged widespread data theft SC Staff April 27, 2026 The investigation began in late December 2025 following approximately 100 reports of data theft. Data Security BlackFile hackers target retail, hospitality with vishing and data extortion SC Staff April 27, 2026 BlackFile initiates attacks through voice phishing (vishing) calls, using spoofed numbers to impersonate IT support. Data Security ADT confirms data breach after ShinyHunters threatens data leak SC Staff April 27, 2026 The breach affected customer and prospective customer data, including names, phone numbers, and addresses. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bit Block Cipher Checksum Ciphertext Cryptographic Hash Functions Cyclic Redundancy Check (CRC) Decryption Digital Signature Digital Signature Algorithm (DSA) Digital Signature Standard (DSS) You can skip this ad in 5 seconds