Discord Confirms Major Data Breach
Discord, the popular messaging platform with over 200 million users worldwide, has announced that official ID photos of approximately 70,000 users may have been leaked following a cyber-attack.
How the Breach Occurred
The platform clarified that hackers targeted a third-party firm responsible for helping verify the ages of Discord users. Importantly, Discord's own systems were not breached.
Users can provide ID photos to verify their age on Discord, which serves as a networking hub for gamers to chat and share files within the gaming community.
What Information Was Compromised
The leaked data may include:
- Personal information
- Partial credit card details
- Messages exchanged with Discord's customer service agents
However, Discord confirmed that no full credit card details, passwords, or messages beyond customer support conversations were exposed in the breach.
Response and Investigation
All impacted users have been contacted directly, and Discord is working with law enforcement to investigate the incident. The platform has revoked the customer support provider's access to the targeted system, though Discord did not name the specific third-party company involved.
Company Statements
A representative from Zendesk, Discord's customer service software provider, told the BBC that their systems were not compromised and the breach was not caused by a vulnerability within their platform.
Discord addressed online claims suggesting the breach was larger than reported, stating these allegations are "inaccurate and part of an attempt to extort payment." The company emphasized this was not a ransomware attack and they "will not reward those responsible for their illegal actions."
Why Personal Data is Valuable
Cybercriminals frequently target personal data because it commands high prices on the black market for use in scams. Information like full names and official ID numbers is especially valuable since, unlike credit card details, it typically remains unchanged over time.
Background on Discord's Security Measures
Discord has previously strengthened its age-verification measures in response to concerns that some servers on the platform were being used to distribute inappropriate content.
Comments
Join Our Community
Sign up to share your thoughts, engage with others, and become part of our growing community.
No comments yet
Be the first to share your thoughts and start the conversation!