Overview
- Discord estimates about 70,000 users who appealed age checks may have had government‑ID images accessed, along with names, usernames, emails, IP addresses, support messages, and limited billing data.
- Passwords, authentication data, regular chats, and full credit card numbers were not accessed, according to the company’s update.
- Discord says the incident stemmed from a compromised customer support provider rather than its core systems, and it has revoked the vendor’s access and is emailing affected users from [email protected].
- Hackers are claiming a far larger trove — roughly 1.5 TB and more than 2 million ID images — and have posted samples online, but Discord calls those figures inaccurate and part of a ransom scheme.
- Researchers have linked the event to a broader campaign against support tools and noted references to Zendesk, which says its platform was not compromised, as privacy advocates warn age‑verification regimes increase breach risks.