All Breaches
January 24, 2023 Verified Education

Duolingo Data Breach

The Duolingo data breach is a mass data extraction incident that became visible when user data on the language learning platform was put up for sale in January 2023 and more widely released in August…

2.7 Million
Reported Records
5
Data Types
Critical
Severity
Yes
Verification

Exposed Data Types

5
Email addresses
Names
Usernames
Spoken languages
Learning progress

Additional Information

Added DateAugust 23, 2023
Breach DateJanuary 24, 2023
Domainduolingo.com
SourceConfig exposure
Last Content UpdateJuly 18, 2026

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information

Company Information

Company NameDuolingo
SectorEducation
CountryUnited States
Websiteduolingo.com

Risk Level

Critical

The reported impact exceeds 1 million and falls within the critical severity band.

Protect Yourself

Check whether you were affected by this breach

Check Now