70,000 Discord users have their government IDs, IP addresses, billing info, and more exposed in data breach

Discord data breach overview: 

• Who: Communication platform Discord disclosed that one of its third-party vendors was compromised by an unauthorized party. 
• Why: Discord said the data breach impacted a “limited number” of users who talked with its customer support or Trust & Safety teams. 
• Where: The data breach affects certain Discord users nationwide. 

Communication platform Discord has disclosed that it recently discovered one of its third-party vendors was compromised by an unauthorized party. 

Discord said the data breach impacted a “limited number” of users who communicated with its customer support or Trust & Safety teams, and that approximately 70,000 users may have had their government ID photos exposed. 

No messages or activities were accessed beyond what users may have talked about with the customer support or Trust & Safety team agents, according to Discord. 

In addition to the government ID photos and messages, Discord said data that may have been exposed in the data breach included names, Discord names, email addresses and other contact details, “limited” billing information, IP addresses and “limited” corporate data. 

Discord noted that no full credit card numbers, CCV codes or passwords or authentication data was impacted by the data breach.

Discord ‘working closely’ with law enforcement to investigate data breach

Discord, which noted it was not itself breached, said it “immediately” revoked the customer support provider’s access to its ticketing system upon discovering the data breach. 

“At Discord, protecting the privacy and security of our users is a top priority,” Discord said in a press release posted on Oct. 3 and updated on Oct. 8. 

The company said it is “working closely” with law enforcement to investigate the incident and is in the process of emailing impacted users. Discord also revealed that the unauthorized party did it in an effort to extort a financial ransom. 

Discord users who were impacted by the data breach can expect to receive an email from an address called [email protected], the company said. 

Users impacted by the data breach are recommended to “stay alert” when receiving messages or other communication that may seem suspicious. 

“We take our responsibility to protect your personal data seriously and understand the inconvenience and concern this may cause,” Discord said.

In other Discord-related news, the company has been targeted by complaints arguing it was used to groom, exploit and abuse children. The complaints further argue Discord offered little interference or oversight to prevent the alleged abuse. 

Are you affected by the Discord data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• HelloFresh recalls meals due to potential listeria contamination
• Tyson reaches $85M settlement over pork price-fixing allegations
• Auto giant Stellantis discloses data breach affecting North American customers
• Class action alleges Canada Dry misleads consumers about product origin