Unacademy is one of the popular online learning platforms. Recently the database of Unacademy is hacked and 22 million users details are put to sale on the dark web according to Cybersecurity intelligence agency Cyble.
The company had suffered a breach in January and contacts are put up for sale on May 3, 2020 for $2000.
According to Cyble the database includes usernames, passwords, email addresses, last login data, date joined, last name, first name, account status and account profile.
The Co-Founder and CTO of Unacademy – Hemesh Singh said “As per the company internal investigation, the email data of about 11 million users have been compromised. Unacademy team is closely monitoring the situation to ensure user privacy and data protection so that no sensitive data has been breached. Unacademy is following stringent encryption methods using the PBKDF2 algorithm with a SHA256 hash, making impossible for anyone to decrypt. Company is also following OTP based authentication to provide an additional layer of security to the users.”
According to Cyble, the hackers are only putting up user records for sale but they may have access to other sensitive information. It is recommended that users have to change their passwords.
