Spoken languages leaked: what it means and what to do

Risk level: low. Can you change it: no. Found in 19 breaches in this directory.

What this data is

The languages listed on your profile or account settings, collected by dating apps, job sites, travel services and customer support systems.

The risk on its own

This is a low risk field. Knowing what languages you speak cannot unlock accounts or steal money. It is often visible on public profiles anyway.

The risk combined with other data

With your name and phone number, language data helps scammers send messages in your first language, which can feel more trustworthy. Some scams specifically target migrant communities using their native language. It can also hint at nationality or ethnic background.

How criminals use it

  • A scam text written in your first language pretends to be from an embassy or immigration office.
  • A fake community support group contacts speakers of a specific language asking for fees.
  • A romance scammer uses your language to build rapport quickly.

What to do now

  1. Focus on higher risk fields in the same breach, such as passwords and phone numbers.
  2. Be cautious of messages in your first language that ask for money, documents or codes.
  3. Warn family members who speak the same language about scams targeting your community.
  4. Remove languages from public profiles if they reveal more than you want to share.

Frequently asked questions

Is my language information sensitive?

Usually not. It is low risk, though it can hint at your background or nationality.

Why would scammers use my language?

A message in your first language feels familiar, which lowers suspicion. Verify the sender through official channels.

Should I remove languages from my profile?

Only if they reveal information you want to keep private. The security risk is low.

Breaches that exposed this data

  • Deezer: 2019-04-22, 229M accounts, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names
  • Adult FriendFinder (2016): 2016-10-16, 170M accounts, Email addresses, Passwords, Spoken languages, Usernames
  • Dubsmash: 2018-12-01, 162M accounts, Email addresses, Geographic locations, Names, Passwords, Phone numbers, Spoken languages
  • Exactis: 2018-06-01, 132M accounts, Credit status information, Dates of birth, Education levels, Email addresses, Ethnicities, Family structure
  • Lumin PDF: 2019-04-01, 15M accounts, Auth tokens, Email addresses, Genders, Names, Passwords, Spoken languages
  • TAP Air Portugal: 2022-08-25, 6.1M accounts, Dates of birth, Email addresses, Genders, Names, Nationalities, Phone numbers
  • Adult FriendFinder (2015): 2015-05-21, 3.9M accounts, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Races
  • Спрашивай.ру: 2015-05-11, 3.5M accounts, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Passwords
  • Duolingo: 2023-01-24, 2.7M accounts, Email addresses, Names, Spoken languages, Usernames
  • Bell (2017 breach): 2017-05-15, 2.2M accounts, Email addresses, Geographic locations, IP addresses, Job titles, Names, Passwords
  • Ster-Kinekor: 2017-03-09, 1.6M accounts, Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers
  • Nival: 2016-02-29, 1.5M accounts, Avatars, Dates of birth, Email addresses, Genders, Names, Spoken languages

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.