Discord said around 70,000 users may have had government ID photos exposed after a hack of a third‑party customer support provider, and emphasized its own systems were not breached [bbc.com#1][engadget.com#1][mashable.com#1][siliconrepublic.com#1][securityweek.com#1][ghacks.net#1]. Other data potentially accessed includes names, contact details, IP addresses, purchase histories, and the last four digits of credit cards, but not full card numbers or passwords [mashable.com#1][engadget.com#1][bleepingcomputer.com#1]. Attackers are claiming far higher figures—from 2.1 million ID photos to data on 5.5 million users—but Discord disputes this as an extortion attempt, says all affected users were notified, and has ended work with the compromised vendor [securityweek.com#1][bleepingcomputer.com#1|
Highlights:
- Scope clarified: Discord estimates about 70,000 users may have had government‑ID photos exposed via a third‑party provider, not through Discord’s own systems [bbc.com#1][engadget.com#1][siliconrepublic.com#1].
- Data types: Potentially accessed data includes names, contact details, IP addresses, purchase histories, and last four digits of credit cards; no full card numbers or passwords were accessed [mashable.com#1][engadget.com#1][bleepingcomputer.com#1].
- Disputed claims: Hackers claim theft of 2.1 million ID photos and data on 5.5 million users, figures Discord disputes as part of an extortion attempt [securityweek.com#1][bleepingcomputer.com#1][engadget.com#1].
- User notifications: Discord says all affected users have been contacted and it is working with law enforcement, data protection authorities, and external security experts [mashable.com#1].
- Vendor status: Discord reports it has secured affected systems and ended work with the compromised vendor; reporting indicates the provider was a customer support platform [engadget.com#1][appleinsider.com#1].
All affected users globally have been contacted and we continue to work closely with law enforcement, data protection authorities, and external security experts, – Nu Wexler
Perspectives:
- Discord: Says roughly 70,000 users’ ID photos may have been exposed, disputes larger figures as extortion, and has ended work with the compromised vendor. (Engadget)
- Threat actors: Claim to have 2.1 million government‑ID photos and data on 5.5 million unique users from the support system. (BleepingComputer)
- Zendesk: States the incident did not arise from a vulnerability in Zendesk’s platform and that its systems were not compromised. (9to5Mac)
Sources:
- ID photos of 70,000 users may have been leaked, Discord says – bbc.com
- 70,000 users may have had IDs leaked in Discord breach – siliconrepublic.com
- Discord says the recent data breach leaked 70,000 government-ID photos – ghacks.net
- Discord reveals 70,000 users government IDs may have been compromised – mashable.com
- Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach – securityweek.com
- Discord says 70,000 users may have had their government IDs leaked in breach – reddit.com
- Discord support was breached, and accounts vary on how bad it was – appleinsider.com
- Hackers claim Discord breach exposed data of 5.5 million users – bleepingcomputer.com
- Discord support breach may have exposed photo IDs for millions of users – 9to5mac.com
- Discord now says 70,000 government IDs may have leaked in provider hack – engadget.com
