On April 27, 2020, the California Office of the Attorney General reported a data breach involving Chegg, Inc., which occurred on April 9, 2020. The breach potentially affected approximately 700 current and former U.S. Chegg employees, with compromised personal information including names and social security numbers.

In September 2018, the California Office of the Attorney General disclosed a data breach affecting Chegg, Inc., an education technology company. The incident, discovered around April 29, 2018, involved an unauthorized party accessing a database containing sensitive user information. The compromised data included names, email addresses, shipping addresses, usernames, and hashed passwords. While no financial details (e.g., credit card numbers or bank statements) were reported as stolen, the exposure of personal and login credentials posed significant risks. Hashed passwords, though encrypted, could still be vulnerable to cracking attempts, potentially leading to unauthorized account access or credential stuffing attacks across other platforms where users reused passwords. The breach highlighted vulnerabilities in Chegg’s data security measures, raising concerns about user privacy and the potential for downstream fraud or identity theft. Customers were advised to reset passwords and monitor accounts for suspicious activity, though the long-term reputational and operational impacts on Chegg remained a concern.

Chegg, a technology giant specializing in textbook rental, confirmed a data breach. It affected some 40 million customers. The company reset all user passwords after hackers gained access to the company’s customer database. That database includes users for Chegg’s website but also other products, such as citation service EasyBib, which it owns. Usernames, email addresses, shipping addresses and hashed passwords were compromised The company went public in 2013, and is currently worth $3.3 billion. Chegg’s stock got down more than 10 percent a day after the breach was revealed.