Discord Security Breach: User Data Exposed via Zendesk Vulnerability
Discord, the popular communication platform, has disclosed a security incident affecting a limited number of users. The incident, which occurred on September 20, involved hackers gaining access to user data through a compromised third-party service.
The hacker group 'Scattered Lapsus$ Hunters' (SLH) claimed responsibility for the attack. They exploited a vulnerability in Zendesk, a service used by Discord for customer support and trust and safety. The compromised data includes full names, usernames, email addresses, IP addresses, messages, and file attachments from support interactions.
For a smaller subset of users, more sensitive information was also exposed. This includes photos of government-issued identification documents and partial payment information. Discord has confirmed that no direct financial information was compromised.
In response to the incident, Discord has taken several measures to mitigate the situation. They have blocked the affected service's access to the ticket system, launched an internal investigation, engaged a digital forensics security firm, and notified law enforcement. The company has also reached out to affected users to inform them of the breach and provide guidance.
Discord has experienced a security incident where hackers gained access to user data through a compromised third-party service. The affected users are being notified, and Discord is working to understand the full extent of the breach and prevent future incidents. Users are advised to remain vigilant and follow Discord's guidance to protect their personal information.
