Discord’s Data Breach Exposed Sensitive User Information to Hackers, But Thankfully, No Passwords Were Compromised

by

Discord recently announced a data breach that happened several weeks ago. Their report details how hackers targeted a third-party company that provides customer support, allowing them to access a large amount of sensitive user data.

It’s important to understand that the hack didn’t directly target Discord itself, but their third-party customer service provider. Hackers gained access to user contact information through this provider, including real names and email addresses.

The hackers intended to use the data to force Discord to pay a ransom. Fortunately, the situation has been resolved.

Discord recently made the incident public after completing a detailed internal review. Once the breach was discovered, Discord immediately cut off the customer service provider’s access and informed the authorities.

When Did the Data Breach Happen?

Reports indicate the security issue happened on September 20th, when someone without permission briefly accessed a customer support system used by Discord that is managed by a third party.

In addition to users’ names and email addresses, the data breach revealed other sensitive details, such as the last four digits of their credit card numbers and images of their official government-issued IDs. This included critical personal information, putting users at risk. Further investigation is ongoing.

Discord stated that, as soon as they learned about the attack, they quickly took action. This involved removing the customer support provider’s access to their ticket system, starting an internal review, hiring a top computer forensics company to help with the investigation and fix the problem, and contacting law enforcement.

Fortunately, home addresses, passwords, and other private details appear to be secure. Fortunately, the problem didn’t escalate into a larger disaster, because Discord responded quickly to address it.

If you were impacted by the security breach, Discord states you’ll get an email from noreply@discord.com (as mentioned earlier) detailing the specific information that was exposed.

Read More

2025-10-04 18:06