2020 Academy platform breach — 600k users
Data compromised
Names, email addresses, usernames, company names, country, certification details
Technical writeup
UiPath discovered unauthorized disclosure of a file containing personal information about 600,000 users of its Academy platform (online training portal). Exposed data included names, email addresses, usernames, company names, country locations, and UiPath certification details. No passwords or financial information compromised. Romania's ANSPDCP fined UiPath €70,000 in 2023 for inadequate security measures.
Root cause
Unauthorized disclosure; exposed file/backup.