Overview

• Discord says roughly 70,000 users’ government‑ID photos from age‑appeal reviews may have been exposed in a third‑party support compromise.
• Other data accessible in affected support records may include names, usernames, emails, IP addresses, support messages, and the last four digits of credit cards with purchase history.
• Attackers claim a far larger haul — up to 1.6 TB touching 5.5 million users and 2.1 million ID images — but Discord calls those figures part of an extortion attempt and refuses to pay.
• Discord says it revoked the vendor’s access, hired external forensics, notified law enforcement and data‑protection authorities, and emailed impacted users from [email protected].
• The hackers say access came via a compromised outsourced support agent tied to Discord’s Zendesk tools; Zendesk says its platform was not breached, and the claims remain unverified.