Credential Stuffing & Data Sale
Unacademy Data Breach (2020)

Modus Operandi:
- Hackers accessed data of over 11 million users, including IDs, passwords, and email addresses.
- The compromised data was sold on the dark web for around ₹1.5 lakh INR.
Investigation Steps:
- Discovery: Cybersecurity firm Cyble reported the breach.
- Verification: Unacademy assessed the extent of the breach.
- Security Audit: Internal systems were audited to identify vulnerabilities.
- Law Enforcement Involvement: Authorities were notified for further investigation.
- User Advisory: Users were advised to update credentials and enhance security measures.