Discord Confirms 70,000 Government IDs Exposed in Third-Party Breach

According to Discord, approximately 70,000 users had government-ID photos exposed in a September 20, 2025 incident, caused by a breach of a third-party customer service provider rather than Discord itself. The data involved included government-issued ID images accessed through the provider’s systems used to review age-related appeals. Threat actors claim to have exfiltrated 1.5 terabytes of data, including over 2.1 million government-issued ID photos, but Discord disputes these figures.

The breach targeted the third-party customer service systems managed by Zendesk, not Discord’s own infrastructure, and no messages or activities beyond those with customer support were accessed. Discord states it revoked the vendor’s access and is coordinating with law enforcement while notifying affected users.