Actor Claims DevChallenges.io User Database Was Exposed
Summary
An unidentified actor reportedly posted a database attributed to DevChallenges[.]io on a hacking forum in February 2026, claiming it contains 20,218 user records with contact, account, invoice and feedback data.
Key points
- An unidentified actor reportedly published a database attributed to DevChallenges[.]io on a hacking forum in February 2026.
- The actor claimed the database contains 20,218 user records; the article does not independently confirm the breach or the dataset's authenticity.
- Reported data fields include names, email addresses, subscription and feedback invoices, GitHub usernames, avatar URLs, UUIDs, and feedback logs or solution descriptions.
- The article says the exposed information could enable phishing, account takeover, or doxxing.
Article Details
- Victim Organization
- DevChallenges.io
- Incident Type
- Alleged data breach and database exposure
- Data Types Exposed
- Full names (display names)
- Email addresses
- Subscription invoices
- Feedback invoices
- GitHub usernames and profile avatar URLs
- Unique user identifiers (UUIDs)
- Platform feedback logs and solution descriptions
- Affected Records
- 20,218 user records, according to the actor's claim; the article also describes 20,218 lines of records.
- Affected Data Size
- Unknown
- Operational Impact
- Unknown; no operational impact is described.
- Ransom Or Extortion
- Unknown; no ransom or extortion activity is described.
- Claim Status
- alleged