Discord warns 70,000 users their ID images may have been accessed in data breach

by

Discord says a security issue with one of its customer service providers may have exposed photos of government-issued IDs for about 70,000 users.

Discord announced in early October that it experienced a data breach, though the extent of the compromised information wasn’t immediately clear. Shortly after, social media reports surfaced claiming that over two million photos submitted for age verification were stolen and were being used in an extortion attempt against the company.

On October 8th, Discord confirmed to The Verge that reports of a data breach were inaccurate, but they did acknowledge someone tried to demand money from them by threatening to release information.

According to a recent blog post, this incident wasn’t a security breach of Discord itself, but an issue with a separate service we use for customer support.

Okay, so there’s been some misinformation going around, and honestly, someone was trying to shake Discord down for money. It turns out around 70,000 of us might have had our ID photos exposed. These were the photos we submitted when we appealed age restrictions, and apparently, a third-party vendor was handling those reviews. It’s a mess, but Discord says the numbers floating around before weren’t accurate.

“Third, we will not reward those responsible for their illegal actions.”

Breach involved customer service data

Discord reports that exposed data could include names, usernames, email addresses, IP addresses, and messages sent through their support channels. Limited billing details, like the type of payment used, the last four digits of a credit card number, and a record of past purchases, might also have been accessed.

Good news, fellow gamers! I just heard back from the company and they confirmed that our passwords, login info, and full credit card details are all safe. No worries there!

Discord quickly cut off the vendor’s access to its systems, started an internal investigation with the assistance of a cybersecurity company, and reported the incident to the police.

Read More

2025-10-09 21:18