Discord.io experiences data breach, shuts down

By Top Class Actions | August 17, 2023

Category: Data Breach

(Photo Credit: Diego Thomazini/Shutterstock)

Discord data breach overview:

Who: Discord.io announced it will be shutting down its operations “for the foreseeable future” in the wake of a data breach that exposed 760,000 members’ information.
Why: The third-party Discord service said it believes the data breach is the result of a vulnerability in its website code.
Where: The Discord.io data breach has nationwide implications.

Discord.io has announced it is shutting down its operations “for the foreseeable future” in the wake of a “major” data breach.

The decision to shut down comes after a hacker stole the information of 760,000 members and posted a sample of the data on Breached Forums, Mashable reports.

Discord.io, a third-party service that helps Discord members generate custom invites for their channels, said it was made aware of the breach the same day it occurred, Aug. 14, and subsequently decided to shut down all services and operations.

The service said it believes the breach was the result of a vulnerability in its website code, which allowed the bad actor to gain access to and download its entire database before putting the data for sale on a third-party website.

Discord.io data breach compromises usernames, IDs, email addresses, among other things

Information that was compromised in the breach, according to Discord.io, includes internal user IDs, avatar information, status information, coin balances, API keys and registration dates, among other things.

Usernames, Discord IDs, email and billing addresses and salted and hashed passwords, also were exposed in the breach, according to Discord.io.

Discord.io said it will continue investigating the breach and that it is taking steps to “ensure that this does not happen again,” including by completely rewriting its website’s code and conducting a “complete overhaul” of its security practices.

The service said no payment information was exposed during the breach, clarifying it does not store such data and that all payments are processed through PayPal and Stripe.

Individuals who have more questions about the data breach can contact Discord.io directly by email or through its official Discord server.

A number of companies — including Google, Roblox, YouTube and Microsoft, among others — have recently been targeted by class action lawsuits over claims revolving around data privacy, AI, and advertising.

Have you been impacted by this data breach? Let us know in the comments.