Skip to main content

Duolingo data breach

The Duolingo breach happened on January 24, 2023 and exposed 2,676,696 accounts. 4 kinds of data were exposed.

Overview

Site
duolingo.com
Breach date
January 24, 2023
Recorded on
August 23, 2023
Accounts exposed
2,676,696
Exposed data
Email addresses, Names, Spoken languages, Usernames
Risk score
23 out of 100

Risk based on the exposed data

This breach scores 23 out of 100. The score is driven mostly by Email addresses, Names, Usernames.

The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.

Breaches from the same period

What affected users should do

  • Passwords were not exposed, but you may receive fake emails aimed at the exposed email addresses.
  • Turn on two-factor authentication for your login.

Create a new password →

This site organizes publicly available information about data breaches. Data as of August 23, 2023. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.