Quest App Alleged Data Exposure
The Quest App 2024 data breach occurred in April 2024 when database backups from Quest App (questapp.in), an Indian digital learning and youth skill development platform operated by Quest Alliance, were exposed and published online.
Exposed Data Types
6- Email addresses
- Names
- Phone numbers
- Passwords
- Dates of birth
- Genders
About This Record
What data was exposed in the Quest App incident?
The compromised database tables contain verified data categories:
- Identity & Account Details: Full names, system user identifiers (UUIDs), genders, and dates of birth.
- Contact Information: Verified email addresses and mobile phone numbers.
- Security Credentials: Password hashes (bcrypt and MD5) and OTP/verification metadata.
How many accounts were affected?
Canonical RFC 5322 ASCII validation verified 535,218 unique valid email addresses.
Security recommendations
The leak of password hashes alongside contact information poses credential-stuffing and targeted phishing threats. Users should immediately update their passwords across Quest App and any shared-password platforms, and enable two-factor authentication.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
