Duolingo Breach

In August 2023, data scraped from Duolingo was widely distributed on a hacking forum. The information was obtained by exploiting a vulnerable API and had previously been available for sale in January 2023. This breach posed a risk to user privacy by linking private email addresses to public data attributes.