Discord Confirms Over 70,000 Users Affected By Customer Service Hack That Has Compromised Images of Government-Issued ID like Driving Licences And Passports

70,000 Discord users whitethorn person had their authorities ID photos compromised pursuing a cyber onslaught connected 1 of its "third-party vendors."

As portion of the company's ineligible work to comply with the UK government's caller Online Safety Act and the EU's Digital Services Act, Discord — which boasts implicit 200 cardinal users worldwide — required users to corroborate their ages done a third-party bureau called 5CA. While antithetic platforms usage antithetic authentication methods, immoderate necessitate a photograph of government-issued ID, specified arsenic a driving licence oregon passport to impervious a user's age. It's these scans from users who had been successful interaction with Discord's lawsuit work squad that person been compromised.

While Discord initially told america that a "limited fig of users" had been impacted, a further update yesterday reveals "approximately 70,000 users that whitethorn person had government-ID photos exposed, which our vendor utilized to reappraisal age-related appeals."

70,000 Discord users whitethorn person had their authorities ID photos compromised. Photo by Artur Widak/NurPhoto via Getty Images.

Cyber Security News, however, puts the fig of those impacted overmuch higher, claiming Discord faced "an extortion attempt" pursuing the "significant" information breach connected September 20 erstwhile hackers had entree to the strategy for 58 hours. They assertion to person stolen 1.5 terabytes of delicate data, including implicit 2.1 cardinal government-issued recognition photos utilized for property verification, affecting "5.5 cardinal unsocial users crossed 8.4 cardinal enactment tickets." This is considerably much than Discord's estimation of 70,000.

Information perchance leaked includes:

• Name, Discord username, email and different interaction details if provided to Discord lawsuit support
• Limited billing accusation specified arsenic outgo type, the past 4 digits of your recognition card, and acquisition past if associated with your account
• IP addresses
• Messages with our lawsuit work agents
• Limited firm information (training materials, interior presentations)
• The unauthorized enactment besides gained entree to a tiny fig of government‑ID images

Discord assured users that afloat recognition paper numbers oregon CCV codes were not involved, nor were Discord messages, posts, oregon immoderate password/authentication data. Anyone who has been impacted tin expect a nonstop email from Discord.

"Discord has and volition proceed to instrumentality each due steps successful effect to this situation. As standard, we volition proceed to often audit our third-party systems to guarantee they conscionable our information and privateness standards," the institution said, adding that it had notified applicable information extortion authorities, "proactively engaged with instrumentality enforcement to analyse this attack," and reviewed its menace detection systems.

"Looking ahead, we urge impacted users enactment alert erstwhile receiving messages oregon different connection that whitethorn look suspicious," Discord added. "We person work agents connected manus to reply questions and supply further support. We instrumentality our work to support your idiosyncratic information earnestly and recognize the inconvenience and interest this whitethorn cause."

Photo by Artur Widak/NurPhoto via Getty Images.

Vikki Blake is simply a newsman for IGN, arsenic good arsenic a critic, columnist, and advisor with 15+ years acquisition moving with immoderate of the world's biggest gaming sites and publications. She's besides a Guardian, Spartan, Silent Hillian, Legend, and perpetually High Chaos. Find her astatine BlueSky.