I just received an email from McAfee alerting me that my information has been leaked on dark web.
Breach Details
Reported On: April 28, 2026
>In April 2026, data reported to belong to Udemy, Inc., headquartered in the United States, was exfiltrated from the company's Salesforce instance. The stolen data includes cryptocurrency addresses, job titles, full names, birth dates, IP addresses, usernames, company names, physical addresses, credit card information, email addresses, phone numbers, bank information, tax IDs and may contain other compromised user details. This breach is being publicly shared on a cybercriminal data leak site.
What Actions To Take
- Change Udemy password and enable MFA/2FA (if not yet enabled).
- Check for email and password 'reuse'.
- Be cautious of emails you receive that may contain phishing links.
- Monitor bank records, especially if you stored payment info or used Udemy as an instructor.