Database of 22 million users on Unacademy hacked; details available for sale

Team SoOLEGAL 8 May 2020 4:30pm

Database of 22 million users on Unacademy hacked; details available for sale

MUMBAI: According to US-based security company Cyble, a database of around 22 million Unacademy clients with contacts from employees of Wipro, Infosys, Cognizant, Google and its shareholder Facebook are up for sale on the darkweb. The company had experienced a violation in January after contacts were placed up for sale for $2000 as early as May 3, the firm stated.

The database contains usernames, email addresses, passwords, date of installation, latest login date, first and last names, account profile and account activity (whether the account is active), as per Cyble.

Unacademy Co-Founder and CTO Hemesh Singh confirmed the violation of privacy, adding that all sensitive information provided by the learners is secure. “We have been closely monitoring the situation and can confirm that basic information related to around 11 million learners has been compromised. However, we would like to assure our learners that no sensitive information such as financial data, location or passwords has been breached. We follow stringent encryption methods using the PBKDF2 algorithm with a SHA256 hash, making it highly implausible for anyone to access the learner passwords. We also follow an OTP based login system that provides an additional layer of security to our learners. We are doing a complete background check and will be addressing any potential security loophole to further our efforts of ensuring a robust security mechanism. Data security and privacy of our learners is of utmost importance to us and we will be in communication with our learners to keep them updated on the progress”, statedHemesh Singh.

Recently, Unacademy received a $110million funding. The company's primary stakeholders include Facebook, General Atlantic and Sequoia.

The hackers are only dealing with the user records for sale at this time according to Cyble, and might have access to more details. The firm has suggested that enrolled Unacademy students and educators must updatetheir passwords on the platform immediately.

Tagged: Database   Unacademyhacked   Wipro   Infosys   Cognizant   Google   Facebook   Hemesh Singh   stakeholders  
Did you find this write up useful? YES 0 NO 0

C2RMTo Know More

Something Awesome Is In The Work









Sign-up and we will notify you of our launch.
We’ll also give some discount for your effort :)

* We won’t use your email for spam, just to notify you of our launch.

SAARTHTo Know More

Launching Soon : SAARTH, your complete client, case, practise & document management SAAS application with direct client chat feature.

If you want to know more give us a Call at :+91 98109 29455 or Mail