Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach

Discord says 70,000 users had government-ID photos exposed in its recent data breach, with the company noting that only individuals who interacted with its Customer Support or Trust & Safety teams were affected. The hackers claim to have obtained 1.5 terabytes of such data, or 2,185,151 photos, according to Vx-Underground, though Discord says only a small number of government‑ID images were exposed.

The breach is linked to a broader campaign targeting the Zendesk software suite, which Discord said was the root cause, and Zendesk told SecurityWeek that the Discord incident was not the result of a vulnerability in its platform, according to Zendesk. Among the compromised data were names, Discord usernames, email addresses, contact details, billing information, IP addresses, messages with support teams, and limited corporate data.

Discord disclosed the incident on 3 October and provided an update on 8 October, stating the affected accounts and the nature of the exposure. The company, and security researchers, continue to investigate extortion attempts from the actors involved, who have allegedly threatened to release the stolen data if a payment is not made.