Personal Data Leak Monitor

Duolingo data breach

2.68M accounts from Duolingo (duolingo.com) were exposed in this breach. Besides email addresses, it included names, spoken languages and usernames.

Breach date
January 24, 2023
Accounts
2,676,696
Added to the database
August 23, 2023

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Email addressesNamesSpoken languagesUsernames

What to do now

  1. Do not tap links in emails claiming to be that service
  2. Expect scam emails that use your real name
  3. Verify you have not reused that login anywhere

Tools that help with this breach

1PasswordPaidVisit the official site →(opens in a new tab)YubiKeyPaidVisit the official site →(opens in a new tab)

About this breach

In August 2023, 2.6M records of data scraped from Duolingo were broadly distributed on a popular hacking forum. Obtained by enumerating a vulnerable API, the data had earlier appeared for sale in January 2023 and contained email addresses, names, the languages being learned, XP (experience points), and other data related to learning progress on Duolingo. Whilst some of the data attributes are intentionally public, the ability to map private email addresses to them presents an ongoing risk to user privacy.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period