Skip to content

Duolingo

1 breach2.7M affected in allTechduolingo.com

BreachAffected
Scraped profile data of 2.6 million Duolingo users sold then leakedJan 24, 20233 years agoScrapingUnverified2.7Macct
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Duolingo, 2023-01-24 · source_type: press
  • 2026-09-25 · Duolingo, 2023-01-24 · source_url: https://www.bleepingcomputer.com/news/security/scraped-data-of-26-million-duolingo-users-released-on-hacking-forum/
  • 2026-09-25 · Duolingo, 2023-01-24 · country: US
  • 2026-09-25 · Duolingo, 2023-01-24 · sector: education
  • 2026-09-25 · Duolingo, 2023-01-24 · data_types: ["emails","names","dob","other"]
  • 2026-09-25 · Duolingo, 2023-01-24 · disclosed: 2023-01-24
  • 2026-09-25 · Duolingo, 2023-01-24 · summary: Data scraped from Duolingo's public profiles through an exposed API, including email addresses and names, was offered for sale in January 2023 and published on a hacking forum in August 2023. Duolingo said the data came from public profile
  • 2026-09-25 · Duolingo, 2023-01-24 · title: Scraped profile data of 2.6 million Duolingo users sold then leaked
  • 2026-09-25 · Duolingo, 2023-01-24 · added
  • 2026-09-25 · Duolingo · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.