Data breach at Unacademy

 Unacademy which is India’s largest education platform based in Bangalore is changing the way to learn. In a span of 6 months, over 300,000 students have benefited from over 2,400 online lessons and specialized courses on cracking various competitive examinations, on our platform. They have onboard some of the top educators in the country. They originally started as a YouTube channel in 2010 by Gaurav Munjal. As a company, it was founded by Roman Saini, Gaurav Munjal, Hemesh Singh in 2015, and is headquartered in Bangalore. The company has a network of over 12,000 educators and offers preparation material for several professional and educational entrance exams. Unacademy lessons are in the form of free videos, and via subscription. 

On May 3rd, 2020, Cyble Inc. discovered that a threat actor had begun to sell an Unacademy user database containing 20 million accounts for $2,000.  This data breach apparently took place in Jan 2020, and the perpetrator alleged that they have access to their entire database. 

Cyble has also acquired the leaked database which approximately contains 22 million (21,909,709) Unacademy’s user account details. Following fields are available on the leaked data:

  • ID
  • Encrypted password
  • username
  • Email address
  • First Name
  • Last Name
  • Date Joined
  • Last Login
  • Is_Staff
  • Is_Active
  • Is_superuser

The users are advised to change their passwords and closely monitor their financial transactions. Wherever possible, multi-factor authentication should be enabled. Ref from Cyble.

Leave a comment