D

Confirmed breach

Duolingo data breach

Country being checked · duolingo.com

A breach of Duolingo was added to Have I Been Pwned’s breach database on 23 August 2023. It affected 2,676,696 accounts. Exposed: Email addresses, Names, Usernames and Spoken languages. The breach began on 24 January 2023, 211 days before it was reported.

Status

Confirmed breach

People affected

2,676,696 accounts

Reported

23 August 2023

Breach began

24 January 2023

Time to tell

211 days (the median in California’s notices over the last year: 154 days)

What was exposed

• Email addresses
• Names
• Usernames
• Spoken languages

Sources

• Breach database · 23 August 2023 · 2,676,696 accountsHave I Been Pwned

Breach databases are read by code. · Corrections and changes

If Duolingo had your data

1. Look for Duolingo’s own notice or letter: it should say what of yours was involved. Keep it.
2. Expect scams that use your details: calls, texts or emails pretending to be Duolingo, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• What to do after a data breach →

Email me if Duolingo has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.