Discord Confirms Security Breach: Personal Data, Messages Exposed
Discord has confirmed a security incident on September 20, 2023, affecting an unspecified number of users. The breach targeted a third-party customer support service used by Discord. An internal and external forensics investigation is underway to determine the extent of the breach.
Discord has assured users that full credit card numbers, security codes, physical addresses, passwords, and most messages were not accessed. However, personal data, payment information, and some messages and attachments were accessed by an unauthorized party. The exposed data includes Discord usernames, emails, contact details, payment types, last four digits of credit cards, purchase history, IP addresses, and messages to customer service.
Government-ID images and photo IDs related to age verification appeals may also have been accessed. Discord received extortion demands from a group claiming to be 'Scattered Lapsus$ Hunters'.
Users who received an incident notification should search for accessed messages using their support ticket number. Discord users should stay alert for suspicious messages and contact Discord support if they have concerns. This incident is separate from the Discord hack in September 2020, where hackers were not able to access users' passwords and two-factor authentication (2FA) information.
Discord has confirmed a security incident affecting some of its users. While the investigation continues, users are advised to stay vigilant and monitor their accounts. Discord has not specified the number of users affected, but those who received notifications should take necessary steps to protect their data.
