Overview

• Discord confirmed a third-party customer support provider was compromised, exposing data from users who contacted Customer Support or Trust & Safety.
• Exposed information includes names, Discord usernames, emails, contact details, IP addresses, limited billing data (payment type, last four digits, purchase history), support messages and attachments, and a small number of government ID images from age‑appeal cases.
• Discord says the attack sought to extort a ransom, and it has revoked the vendor’s access, launched a forensic investigation, and notified law enforcement and data‑protection authorities.
• The company says passwords, authentication data, full credit card numbers, CVV codes, and Discord activity outside support interactions were not accessed.
• Reports place the incident on September 20 and link it to a Zendesk instance and claims by Scattered Lapsu$ Hunters, but Discord has not confirmed the vendor or attributed the attack; affected users are being contacted from [email protected].