ShinyHunters Claims Udemy Breach and Threatens to Leak 1.4 Million Records

The ShinyHunters extortion group claimed it breached online learning platform Udemy and stole more than 1.4 million user records, according to multiple reports. The attackers allegedly said the haul includes personally identifiable information and internal corporate files, raising concerns that affected users could face phishing, identity fraud, and other follow-on abuse if the data is authentic.

The group reportedly threatened to publish the stolen information unless Udemy entered negotiations, with reporting indicating a leak deadline of April 27. Researchers and media outlets noted that the exact contents of the dataset had not been independently verified because no sample had been publicly released at the time, but the claim placed Udemy among a growing list of organizations publicly named by ShinyHunters in recent extortion activity.