Discord denies massive breach, confirms limited exposure of 70K ID photos

Discord denies a massive breach and says only about 70,000 government-ID photos were exposed, not 5.5 million users as claimed by attackers. The company emphasises that it was a third-party customer service provider, not Discord itself, that was compromised, and that the vendor’s access has been revoked as Discord launched an internal investigation with the help of a leading computer forensics firm and notified law enforcement.

The attackers claim to have accessed Discord’s Zendesk integrations and exfiltrated about 1.6TB of data, including 8.4 million support tickets, though Discord says no data beyond user interactions with support agents was accessed. Discord states that financial data, passwords or authentication data were not exposed, and that only a limited number of users who contacted Support or Trust & Safety were affected.

The firm continues to notify affected users by email, and, according to BleepingComputer, the attackers told them they had stolen over 70,000 government IDs among 521,000 age-verification tickets. October 09, 2025. according to BleepingComputer