Data and photos of Discord users’ documents leaked online
4 October 16:18
The Discord platform has confirmed a data leakage incident involving a third-party contractor that maintained the company’s customer support system and interaction with the security department. According to the company’s statement, the attackers did not gain direct access to Discord’s infrastructure – the attack affected only the contractor’s system, "Komersant Ukrainian" reports.
The hack compromised the data of a limited number of users, including names, nicknames, email addresses, and the last four digits of bank cards. It has also been confirmed that cybercriminals gained access to a small number of photos of identity documents that users provided when challenging age restrictions. According to the company, full card numbers and passwords were not available.
According to Discord, the attackers tried to extort money from the contractor. The company revoked the contractor’s access to the request processing system, notified supervisory authorities, and began cooperation with law enforcement agencies. Additionally, the company conducted an audit of security measures and threat monitoring systems for third-party services.
The company has already begun individualized email alerts to users. The scale of the Discord leak has not yet been disclosed.
