Every public data breach

47 disclosed this week · 26,367 on record

Duolingo

1 breach2.7M affected in allTechduolingo.com

Company profile
About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

source_type2026-09-25
Duolingo, 2023-01-24press
source_url2026-09-25
Duolingo, 2023-01-24https://www.bleepingcomputer.com/news/security/scraped-data-of-26-million-duolingo-users-released-on-hacking-forum/
country2026-09-25
Duolingo, 2023-01-24US
sector2026-09-25
Duolingo, 2023-01-24education
data_types2026-09-25
Duolingo, 2023-01-24["emails","names","dob","other"]
disclosed2026-09-25
Duolingo, 2023-01-242023-01-24
summary2026-09-25
Duolingo, 2023-01-24Data scraped from Duolingo's public profiles through an exposed API, including email addresses and names, was offered for sale in January 2023 and published on a hacking forum in August 2023. Duolingo said the data came from public profile
title2026-09-25
Duolingo, 2023-01-24Scraped profile data of 2.6 million Duolingo users sold then leaked
Added2026-09-25
Duolingo, 2023-01-24
Added2026-09-25
Duolingo