Discord data breach class action overview:
- Who: Plaintiff Jacqueline Uceta filed a class action lawsuit against Discord Inc.
- Why: Uceta claims Discord failed to properly safeguard and secure the PII of users affected by a recent data breach.
- Where: The Discord data breach class action lawsuit was filed in California federal court.
A new class action lawsuit alleges Discord failed to properly secure and safeguard the personally identifiable information (PII) of users affected by a recent data breach.
Plaintiff Jacqueline Uceta claims Discord failed to implement adequate data security measures to prevent the data breach, which allegedly occurred on or about Sept. 20. Roughly 70,000 Discord users had their government IDs, IP addresses, billing info, and other personal information exposed in the data breach.
“Despite Discord’s duty to safeguard the private information of plaintiff and class members, their private information was compromised when an unauthorized party gained access to Defendant’s third-party customer support services and exfiltrated sensitive data stored therein on or about Sept. 20, 2025,” the Discord class action lawsuit says.
Uceta argues that Discord failed to inform victims of the data breach, which allegedly compromised users’ names, government ID images, Discord usernames, emails, limited billing information, IP addresses and messages with customer service agents, until Oct. 3.
Uceta wants to represent a nationwide class of individuals in the United States whose personally identifiable information was compromised in the Discord data breach.
Discord’s actions negligent and reckless, class action claims
Uceta claims Discord was negligent and reckless in the way it maintained the personally identifiable information of users affected by the data breach, arguing the company should have been aware of the risks of third-party vulnerabilities and weak access controls.
“Upon information and belief, the mechanism of the cyberattack and potential for improper disclosure of Plaintiff’s and Class Members’ PII was a known risk to Defendant, and thus Defendant was on notice that failing to take steps necessary to secure the PII from those risks left that property in a dangerous condition,” the Discord class action lawsuit says.
Uceta claims Discord is guilty of negligence, breach of implied contract and unjust enrichment and of violating the Federal Trade Commission Act.
She demands a jury trial and requests declaratory and injunctive relief and an award of actual, compensatory, statutory and punitive damages for herself and all class members.
In other data breach news, a Florida federal judge recently granted final approval of a $20 million settlement resolving claims that a breach involving Fortra’s GoAnywhere MFT software exposed the personal information of millions of individuals.
Do you believe Discord did enough to protect your personally identifiable information? Let us know in the comments.
The plaintiff is represented by Jae K. Kim and Gerald D. Wells III of Lynch Carpenter LLP.
The Discord data breach class action lawsuit is Uceta v. Discord Inc., Case No. 3:25-cv-08582, in the U.S. District Court for the Northern District of California.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
- Class action accuses JPMorgan Chase, 6 other major banks, of fixing interest rates for decades
- Credit One Bank class action alleges harassing debt collection practices
- Kotex class action alleges tampons contain undisclosed lead
- Oakberry class action alleges acai products not ‘all natural’ and contain synthetic citric acid
