Hacker sells 22 million Unacademy user records after data breach

guest · May 6, 2020

Hacker sells 22 million Unacademy user records after data breach
May 6, 2020
https://www.bleepingcomputer.com/ne...ion-unacademy-user-records-after-data-breach/

Online learning platform Unacademy has suffered a data breach after a hacker gained access to their database and started selling the account information for close to 22 million users.

Unacademy is one of India's largest online learning platforms boasting 14K teachers, over a million video lessons, and over 20 million registered users (learners).
Hacker sells Unacademy user database
On May 3rd, 2020, cyber intelligence company Cyble Inc. discovered that a threat actor had begun to sell an Unacademy user database containing 20 million accounts for $2,000.
While advertised as 20 million, the database contains a total of 21,909,707 user records.

These records include usernames, SHA-256 hashed passwords, date joined, last login date, email addresses, first and last names, and whether the account is active, a staff member, or a superuser.
Click to expand...

Hackers claim to have stolen more than user data
In a conversation seen by BleepingComputer, the hackers state that they have stolen much more than just the user database.

The threat actors have alleged to Cyble's researchers that they have stolen the entire database, but are only putting the user records up for sale at this time.
This holding back of other data indicates that there is more value to be had in the stolen database than just user records.
Click to expand...

guest · May 10, 2020

mood said: ↑

Hacker sells 22 million Unacademy user records after data breach May 6, 2020
Click to expand...

Updated (May 6, 2020):

Update 5/6/20 3:42 PM EST: Added statement

In a statement from Hemesh Singh, Co-founder and CTO, Unacademy, confirmed the breach, but stated only 11 million users were affected and that no passwords were exposed.

"We have been closely monitoring the situation and can confirm that basic information related to around 11 million learners has been compromised. However, we would like to assure our learners that no sensitive information such as financial data, location or passwords has been breached. We follow stringent encryption methods using the PBKDF2 algorithm with a SHA256 hash, making it highly implausible for anyone to access the learner passwords. [...]"
Click to expand...

Log in or Sign up

Hacker sells 22 million Unacademy user records after data breach

guest Guest

guest Guest

Log in or Sign up

Hacker sells 22 million Unacademy user records after data breach

guest Guest

guest Guest

Useful Searches