Unacademy Database Of 22 Million Users Hacked, Up For Sale

A database of nearly 22 million users of Unacademy with contacts of employees of Google, Infosys, Wipro, Cognizant and its investor Facebook is up for sale on the dark web, as per the US-based security firm Cyble. The company had suffered a breach in January following which contacts were put up for sale as recently as 3rd May for $2000, the firm said.

As per Cyble, the database includes usernames, emails addresses, passwords, first and last names, date joined, last login date, account profile and account status (whether the account is active or not).

In a statement to security news website, BleepingComputer, Unacademy confirmed that basic information related to 11 million learners had been compromised but said that no sensitive information such as financial data, passwords or location had been leaked. The firm said it is conducting further background checks and will keep users updated.

Unacademy currently raised a Series F round of funding of $110 million. Key investors in the firm include Facebook, General Atlantic and Sequoia.

The hackers are only putting up the user records up for sale at this time and may have access to more information, explained Cyble. The firm suggested that registered Unacademy educators and learners immediately change their passwords on the site.