All Breaches
July 5, 2025 Unverified Education

OnlineSkills Alleged Data Exposure

The 2025 OnlineSkills data breach surfaced in July 2025 when client and student CRM databases belonging to OnlineSkills (onlineskills.ru and onlineskills.pro), a Russian vocational online education portal, were compromised and circulated online.

506.3 Thousand
Email Identifiers
5
Data Types
High
Exposure Scope
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Email addresses
  • Names
  • Phone numbers
  • Physical addresses
  • Purchases

About This Record

What information was affected in the OnlineSkills incident?

The leaked export file covers course subscriptions and client transactions dating from March 2019 through July 2025, containing 1,504,732 customer records. Compromised data classes include:

  • Contact Coordinates: Validated user primary email addresses (client_email) and mobile telephone numbers (phone_number).
  • Personal Identifiers: Full customer names (customer_name) and registration timestamps.
  • Geographic Coordinates: Country of origin, residential municipality/city, and street addresses.
  • Educational & Transaction Records: Enrolled courses/programs (order_composition), payment records, and order transaction statuses.

How many accounts were affected?

Strict RFC 5322 ASCII canonical verification confirmed 506,329 unique valid email addresses across the database.

Technical analysis and security risks

The convergence of verified email addresses, telephone numbers, and specific vocational course enrolments provides malicious actors with high-fidelity context for fraudulent spear-phishing and phone impersonation scams. Affected students are advised to:

  • Exercise vigilance regarding unexpected telephone calls or messages claiming to represent online learning platforms or certification authorities.
  • Never disclose payment authentication codes or banking credentials in response to unverified inquiries.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information