Discord Reports Potential Leak of 70,000 User ID Photos

Discord, the popular messaging platform favored by gamers, recently reported a significant security breach. Official identification photos of approximately 70,000 users may have been leaked after a cyber-attack targeting an age-verification service. Despite the breach, Discord confirmed that its own platform remains secure and unaffected.

Details of the Leak

During the cyber-attack, hackers specifically targeted a third-party firm responsible for verifying the age of users. This leak could involve sensitive information, including:

• Official ID photos
• Partial credit card details
• Messages exchanged with Discord’s customer service

However, Discord clarified that full credit card information, account passwords, and any communications beyond those with customer service agents were not part of the leak.

Steps Taken by Discord

To address the situation, Discord has contacted all impacted users. The company is currently collaborating with law enforcement to investigate the breach. Additionally, it has revoked access to the targeted system from the customer support provider involved in the incident.

Clarifications from Discord

While some commentators suggested that the breach’s scale might be more extensive than reported, Discord’s spokesperson dismissed these claims. The company stated that these inaccuracies were attempts to extort payment, asserting, “We will not reward those responsible for their illegal actions.”

Ongoing Concerns about Cybersecurity

Cybercriminals frequently seek personal data, which can be sold on the black market for various scams. Information such as full names and official ID numbers remains particularly valuable due to its longevity. In response to ongoing concerns, Discord has previously reinforced its age-verification processes, especially amidst allegations of its platform being used to disseminate inappropriate content.

This incident highlights the vulnerabilities that can arise with third-party services, stressing the importance of stringent cybersecurity measures to protect user data.