Mathway, a widely used math problem-solving app popular with students, suffered a data breach in January 2020 that exposed over 25.7 million user records. The breach stemmed from a misconfiguration, and the stolen data was subsequently sold on a dark web marketplace. Mathway was acquired by educational services company Chegg the same year. The exposed data included names, email addresses, salted password hashes, device information, and social media profile links from connected Google and Facebook accounts. Salted password hashes offer some protection, but they can still be cracked with enough computing effort. The combination of passwords and social media profiles is particularly sensitive, as it allows attackers to link identities across platforms and target accounts elsewhere. Mathway notified affected users and required password resets following the breach. No major regulatory action or class-action settlement has been publicly documented in connection with this incident. Users whose data was exposed face ongoing risks from phishing attempts and credential-stuffing attacks, where stolen login details are tested against other websites and services.

Educational platforms collect user accounts, emails, usage data, and sometimes payment or subscription information.

Mathway operates as part of the Chegg product portfolio following its 2020 acquisition. Chegg has faced significant pressure from AI-powered homework assistance tools, with its core business model disrupted by the rise of ChatGPT and similar tools. The company underwent major restructuring in 2024 including significant workforce reductions. Mathway's standalone profile within that context is limited.