Company Details
chegg-inc-
7,733
242,835
6113
chegg.com
0
CHE_3201787
In-progress

Chegg Inc. Company CyberSecurity Posture
chegg.comAbout Chegg: Chegg provides individualized learning support to students as they pursue their educational journeys. Available on demand 24/7 and powered by over a decade of learning insights, the Chegg platform offers students AI-powered academic support thoughtfully designed for education coupled with access to a vast network of subject matter experts who ensure quality. No matter the goal, level, or style, Chegg helps millions of students around the world learn with confidence by helping them build essential academic, life, and job skills to achieve success. Certified Great Place to Work!: http://reviews.greatplacetowork.com/chegg For More Information: https://jobs.chegg.com/ Chegg is an equal opportunity employer
Company Details
chegg-inc-
7,733
242,835
6113
chegg.com
0
CHE_3201787
In-progress
Between 700 and 749

Chegg Inc. Global Score (TPRM)XXXX

Description: On April 27, 2020, the California Office of the Attorney General reported a data breach involving Chegg, Inc., which occurred on April 9, 2020. The breach potentially affected approximately 700 current and former U.S. Chegg employees, with compromised personal information including names and social security numbers.
Description: In September 2018, the California Office of the Attorney General disclosed a data breach affecting Chegg, Inc., an education technology company. The incident, discovered around April 29, 2018, involved an unauthorized party accessing a database containing sensitive user information. The compromised data included names, email addresses, shipping addresses, usernames, and hashed passwords. While no financial details (e.g., credit card numbers or bank statements) were reported as stolen, the exposure of personal and login credentials posed significant risks. Hashed passwords, though encrypted, could still be vulnerable to cracking attempts, potentially leading to unauthorized account access or credential stuffing attacks across other platforms where users reused passwords. The breach highlighted vulnerabilities in Chegg’s data security measures, raising concerns about user privacy and the potential for downstream fraud or identity theft. Customers were advised to reset passwords and monitor accounts for suspicious activity, though the long-term reputational and operational impacts on Chegg remained a concern.
Description: Chegg, a technology giant specializing in textbook rental, confirmed a data breach. It affected some 40 million customers. The company reset all user passwords after hackers gained access to the company’s customer database. That database includes users for Chegg’s website but also other products, such as citation service EasyBib, which it owns. Usernames, email addresses, shipping addresses and hashed passwords were compromised The company went public in 2013, and is currently worth $3.3 billion. Chegg’s stock got down more than 10 percent a day after the breach was revealed.


No incidents recorded for Chegg Inc. in 2025.
No incidents recorded for Chegg Inc. in 2025.
No incidents recorded for Chegg Inc. in 2025.
Chegg Inc. cyber incidents detection timeline including parent company and subsidiaries

About Chegg: Chegg provides individualized learning support to students as they pursue their educational journeys. Available on demand 24/7 and powered by over a decade of learning insights, the Chegg platform offers students AI-powered academic support thoughtfully designed for education coupled with access to a vast network of subject matter experts who ensure quality. No matter the goal, level, or style, Chegg helps millions of students around the world learn with confidence by helping them build essential academic, life, and job skills to achieve success. Certified Great Place to Work!: http://reviews.greatplacetowork.com/chegg For More Information: https://jobs.chegg.com/ Chegg is an equal opportunity employer


There’s a reason Penn State consistently ranks among the top one percent of the world’s universities. Across 24 campuses, our nearly 88,000 students and 17,000 faculty and staff know the real measure of success goes beyond the classroom—it’s the positive impact made on communities across the world.

Ranked number one in the world in the 2025 Times Higher Education World Rankings, we are at the forefront of the full range of academic disciplines, including medical sciences; mathematical, physical and life sciences; humanities; and social sciences. As the oldest university in the English-speaking

University of Florida is a major, public, comprehensive, land-grant, research university. The state's oldest, largest and most comprehensive university, it is among the nation's most academically diverse public universities. University of Florida has a long history of established programs in interna

For more than 20 years, we have remained committed to making a positive impact in the communities we serve, by providing accessible, high-quality undergraduate, graduate, and specialized degree programs. We know that when our students succeed, countries prosper, and societies benefit. We take very

Founded in 1861, the University of Washington is one of the oldest state-supported institutions of higher education on the West Coast and is one of the preeminent research universities in the world. Located minutes from downtown Seattle, the main UW campus provides gorgeous views of the Cascade and

Cornell is a privately endowed research university and a partner of the State University of New York. As the federal land-grant institution in New York State, we have a responsibility—unique within the Ivy League—to make contributions in all fields of knowledge in a manner that prioritizes public en

As the largest university in one of the nation’s most iconic cities, Temple educates diverse future leaders from across Philadelphia, the country and the world who share a common drive to learn, prepare for their careers and make a real impact. Founded as a night school by Russell Conwell in 1884, T

As the State's flagship, the University of Maryland (UMD) strives to bring students deeply into the process of discovery, innovation and entrepreneurship. Whenever possible, hands-on research complements classroom instruction. Interdisciplinary collaborations facilitate the understanding of complex

Purdue University is a vast laboratory for discovery. The university is known not only for science, technology, engineering, and math programs, but also for our imagination, ingenuity, and innovation. It’s a place where those who seek an education come to make their ideas real — especially when thos
.png)
The tech layoff wave is still kicking in 2025. Last year saw more than 150,000 job cuts across 549 companies, according to independent...
Despite a significant revenue drop, Chegg Inc (CHGG) focuses on skilling business growth and cost-cutting measures to drive future...
Tech News News: Chegg is laying off 388 employees, approximately 45% of its workforce, citing the impact of AI-powered tools and reduced...
So far in 2025, some 218 tech companies have laid off more than 112000 employees, according to layoffs.fyi.
SANTA CLARA, Calif., October 16, 2025--Chegg, Inc. (NYSE: CHGG), a leading learning platform, announced today that it is scheduled to...
Despite a significant revenue drop, Chegg Inc (CHGG) focuses on strategic growth areas and cost-saving measures to enhance future...
SANTA CLARA, Calif., July 24, 2025--Chegg, Inc. (NYSE: CHGG), a leading student-first online learning platform, announced today that it is...
Businesses are scrambling to be cited in AI-generated answers on Google, Perplexity and ChatGPT. A new crop of nascent search engine optimisation startups...
North Korean hackers have been linked with stealing approximately $1.4 billion worth of Ethereum, about 400000 coins,...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Chegg Inc. is http://www.chegg.com.
According to Rankiteo, Chegg Inc.’s AI-generated cybersecurity score is 710, reflecting their Moderate security posture.
According to Rankiteo, Chegg Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Chegg Inc. is not certified under SOC 2 Type 1.
According to Rankiteo, Chegg Inc. does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Chegg Inc. is not listed as GDPR compliant.
According to Rankiteo, Chegg Inc. does not currently maintain PCI DSS compliance.
According to Rankiteo, Chegg Inc. is not compliant with HIPAA regulations.
According to Rankiteo,Chegg Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Chegg Inc. operates primarily in the Higher Education industry.
Chegg Inc. employs approximately 7,733 people worldwide.
Chegg Inc. presently has no subsidiaries across any sectors.
Chegg Inc.’s official LinkedIn profile has approximately 242,835 followers.
Chegg Inc. is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.
Yes, Chegg Inc. has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/chegg.
Yes, Chegg Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/chegg-inc-.
As of December 18, 2025, Rankiteo reports that Chegg Inc. has experienced 3 cybersecurity incidents.
Chegg Inc. has an estimated 14,847 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an law enforcement notified with yes (california office of the attorney general)..
Title: Chegg Data Breach
Description: Chegg, a technology giant specializing in textbook rental, confirmed a data breach affecting approximately 40 million customers. The company reset all user passwords after hackers gained access to the company’s customer database, which includes users for Chegg’s website and other products such as EasyBib. Usernames, email addresses, shipping addresses, and hashed passwords were compromised. The company went public in 2013 and is currently worth $3.3 billion. Chegg’s stock declined more than 10 percent a day after the breach was revealed.
Type: Data Breach
Title: Chegg, Inc. Data Breach
Description: A data breach involving Chegg, Inc. potentially affected approximately 700 current and former U.S. Chegg employees, with compromised personal information including names and social security numbers.
Date Detected: 2020-04-27
Date Publicly Disclosed: 2020-04-27
Type: Data Breach
Title: Chegg, Inc. Data Breach (2018)
Description: The California Office of the Attorney General reported a data breach involving Chegg, Inc. on September 26, 2018. It was discovered that, on or around April 29, 2018, an unauthorized party gained access to a database containing user data, which may have included names, email addresses, shipping addresses, usernames, and hashed passwords, although no financial information was reported as compromised.
Date Detected: 2018-04-29
Date Publicly Disclosed: 2018-09-26
Type: Data Breach
Threat Actor: Unauthorized party
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Usernames, Email addresses, Shipping addresses, Hashed passwords

Data Compromised: Names, Social security numbers

Data Compromised: Names, Email addresses, Shipping addresses, Usernames, Hashed passwords
Systems Affected: user database
Identity Theft Risk: Potential (PII exposed)
Payment Information Risk: None (no financial information compromised)
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Usernames, Email Addresses, Shipping Addresses, Hashed Passwords, , Names, Social Security Numbers, , Pii (Personally Identifiable Information) and .

Entity Name: Chegg
Entity Type: Company
Industry: Technology
Customers Affected: 40 million

Entity Name: Chegg, Inc.
Entity Type: Company
Industry: Education Technology
Location: United States

Entity Name: Chegg, Inc.
Entity Type: Corporation
Industry: Education Technology
Location: California, USA

Law Enforcement Notified: Yes (California Office of the Attorney General)

Type of Data Compromised: Usernames, Email addresses, Shipping addresses, Hashed passwords
Number of Records Exposed: 40 million
Personally Identifiable Information: usernamesemail addressesshipping addresses

Type of Data Compromised: Names, Social security numbers
Number of Records Exposed: 700
Sensitivity of Data: High

Type of Data Compromised: Pii (personally identifiable information)
Sensitivity of Data: Moderate (hashed passwords, no financial data)
Data Exfiltration: Likely (unauthorized access to database)
Data Encryption: Partially (hashed passwords)
Personally Identifiable Information: namesemail addressesshipping addressesusernames

Regulatory Notifications: California Office of the Attorney General

Source: California Office of the Attorney General
Date Accessed: 2020-04-27

Source: California Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2020-04-27, and Source: California Office of the Attorney General.
Last Attacking Group: The attacking group in the last incident was an Unauthorized party.
Most Recent Incident Detected: The most recent incident detected was on 2020-04-27.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2018-09-26.
Most Significant Data Compromised: The most significant data compromised in an incident were usernames, email addresses, shipping addresses, hashed passwords, , names, social security numbers, , names, email addresses, shipping addresses, usernames, hashed passwords and .
Most Significant System Affected: The most significant system affected in an incident was user database.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were social security numbers, names, shipping addresses, usernames, hashed passwords and email addresses.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 40.0M.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
.png)
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.