[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2x33u0ywoemgz":3,"$f3o5rotqyu8jpe":60},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":16,"affectedCount":16,"affectedCountStatus":17,"affectedCountLowerBound":18,"affectedCountUnit":19,"hasEnglishDescription":4,"contentLocale":20,"availableLocales":21,"translations":31,"severity":42,"dataClasses":43,"description":51,"seoTitle":52,"seoDescription":53,"logoUrl":54,"isVerified":4,"isSensitive":55,"isSpamList":55,"isMalware":55,"company":56},"6a452308a20f867c8ba8e75b","udemy","Udemy 2026年数据泄露","udemy.com","2026-04-24T00:00:00.000Z","2026-04-26T23:01:50.000Z","2026-10-09T20:08:18.390Z","Third party breach","",[],1401259,"known",null,"unknown","zh",[22,23,20,24,25,26,27,28,29,30],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":32,"tr":33,"zh":34,"hi":35,"es":36,"ar":37,"fr":38,"bn":39,"pt":40,"ru":41},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[44,45,46,47,48,49,50],"Email addresses","Employers","Job titles","Names","Payment methods","Phone numbers","Physical addresses","\u003Cp>Udemy 数据泄露发生于2026年4月，是一起涉及教育和电子商务领域的高风险泄露事件。该在线教育平台的客户和讲师数据遭到暴露，影响约1,401,259个不重复的电子邮箱地址。由于本条记录包含雇主、职位、支付方式、电话和地址等字段，风险并不限于账户通知或垃圾邮件。攻击者可以利用学员、讲师和企业培训相关信息，编造有针对性的网络钓鱼、虚假支付和虚假课程消息。\u003C\u002Fp> \u003Ch2>泄露的数据类型与风险\u003C\u002Fh2> \u003Cp>本条记录中已核实的数据字段包括电子邮箱地址、雇主信息、职位、完整姓名、支付方式、电话号码和实际地址。密码、完整支付卡号、证书内容、课程进度数据和身份证件不属于已核实的数据类别，因此本说明不将其列为泄露内容。支付方式和雇主信息可能被结合用户的职业背景用于定向攻击，因此本条记录应被视为高风险。\u003C\u002Fp> \u003Ch2>教育平台与讲师相关风险\u003C\u002Fh2> \u003Cp>Udemy 用户面临的首要风险是虚假的课程、支付和账户支持消息。攻击者可能借课程退款、证书核验、讲师收款、企业培训邀请、发票更新或账户安全等事由，诱导用户点击链接。消息中出现真实的雇主、职位或支付方式信息，并不能证明消息安全。用户应直接登录官方平台核实交易，并谨慎对待通过电子邮件收到的支付或验证请求。\u003C\u002Fp> \u003Ch2>支付方式与雇主信息的风险\u003C\u002Fh2> \u003Cp>讲师和企业培训用户面临的风险更大。职位和雇主信息可被用于编造虚假的人力资源、培训预算、证书核验或企业账户邀请消息。企业账户管理员应监控培训平台的访问情况、关联的支付信息、团队成员和授权用户名单。如果员工用于个人培训账户的电子邮箱地址与企业账户有关联，网络钓鱼消息可能更具迷惑性。\u003C\u002Fp> \u003Ch2>已核实的范围与界限\u003C\u002Fh2> \u003Cp>由于本条记录不包含密码，本说明不应声称发生了密码泄露；但用户仍应检查账户安全。用户应为 Udemy 账户和电子邮箱账户分别设置不重复使用的密码，启用双因素身份验证，并结束不熟悉的登录会话。同时，应检查已登记的支付方式、账单历史和课程购买记录。收到可疑的退款或支付通知时，应直接通过平台核实交易。\u003C\u002Fp> \u003Ch2>平台应吸取的安全教训\u003C\u002Fh2> \u003Cp>对于教育平台而言，Udemy 的这条记录表明，同一数据池中的客户、讲师和企业培训数据可能带来不同的风险。雇主和职位信息可被用于针对职业背景的定向攻击；支付方式信息则为虚假发票和退款消息提供了素材。平台应明确告知用户哪些数据字段受到影响，不应在缺乏证据的情况下声称密码或完整卡片信息已泄露，造成不必要的恐慌。企业客户的访问和开票流程也应受到保护。\u003C\u002Fp> \u003Ch2>必要的防范措施\u003C\u002Fh2> \u003Cp>Udemy 数据泄露将教育、职业和支付相关信息集中在同一条记录中，因此其社会工程攻击风险需要优先处理。受影响的用户应警惕虚假的课程、证书、支付和退款消息，加强平台账户和电子邮箱账户的安全，并核查企业培训账户的授权用户。最准确的处理方式是将本条记录视为与职业和教育相关的客户数据风险，而非密码泄露。\u003C\u002Fp> \u003Cp>Udemy 记录中的雇主和职位信息，使攻击者更容易根据用户的职业背景发起定向攻击。员工收到有关企业培训、认证、人力资源审批或培训预算的消息时，可能会将其视为真实的业务流程。针对讲师的虚假支付、税务表格、学员支持或课程下架消息也会带来额外风险。因此，对于任何声称来自平台的支付或证书相关请求，用户都应直接登录官方账户核实。\u003C\u002Fp> \u003Cp>虽然支付方式属于本条记录中已核实的字段，但完整卡片信息泄露的说法尚未得到证实。用户应检查已登记的支付工具和账单历史，不应使用退款或支付信息更新消息中的链接。企业培训管理人员应检查团队成员、发票接收人以及拥有支付权限的人员。即使密码尚未被确认为泄露字段，也应加强账户和电子邮箱的安全，因为同一电子邮箱地址可能已在其他泄露事件中与某个密码关联。\u003C\u002Fp>","Udemy 2026年数据泄露 (1.4 百万 已报告记录数)","Udemy 2026年数据泄露. 据报告，涉及1.4 百万条记录。 已报告的数据：电子邮箱地址, 雇主, 职位名称。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fudemy_com.webp",false,{"name":57,"sector":58,"country":59,"website":9,"websiteArchiveUrl":14,"websiteStatus":14,"websiteCheckedAt":18},"Udemy","Education","United States",{"success":4,"breaches":61},[62,70,77,83],{"slug":63,"title":64,"companyName":65,"logoUrl":66,"breachDate":67,"affectedCount":68,"affectedCountStatus":69},"rectory-school-2026","Rectory School 数据泄露事件（至少91人受影响）","Rectory School","\u002Fuploads\u002Flogo\u002Frectory-school.png","2026-07-21T00:00:00.000Z",91,"lower_bound",{"slug":71,"title":72,"companyName":73,"logoUrl":74,"breachDate":75,"affectedCount":18,"affectedCountStatus":76},"sumner-county-schools-2026","Sumner County Schools 2026 年数据泄露事件","Sumner County Schools","\u002Fuploads\u002Flogo\u002Fsumner-county-schools-2026.webp","2026-07-20T00:00:00.000Z","not_disclosed",{"slug":78,"title":79,"companyName":80,"logoUrl":81,"breachDate":75,"affectedCount":82,"affectedCountStatus":69},"umass-amherst-2026","UMass Amherst 数据泄露事件","University of Massachusetts Amherst","\u002Fuploads\u002Flogo\u002Fumass-amherst.png",1,{"slug":84,"title":85,"companyName":86,"logoUrl":87,"breachDate":88,"affectedCount":89,"affectedCountStatus":17},"houston-city-college-2026","Houston City College 2026年数据泄露事件","Houston City College","\u002Fuploads\u002Flogo\u002Fhouston_city_college.png","2026-06-16T00:00:00.000Z",831642]