Discord, the popular messaging and community platform used by millions of gamers worldwide, has confirmed that official ID photos and personal information from around 70,000 users may have been leaked following a recent cyber attack.
According to the San Francisco–based company, the breach targeted a third-party firm responsible for verifying users’ ages — not Discord’s own servers. The platform itself remains secure and unaffected, Discord said in a statement.
What Information Was Exposed
Users who submitted ID photos for age verification may have had parts of their personal data exposed, including:
- Official ID images
- Partial credit card details
- Customer support messages exchanged with Discord agents
However, Discord emphasized that no full credit card numbers, passwords, or private user messages were compromised in the attack.
Discord’s Response and Investigation
Discord says all affected users have been notified directly, and the company is now working with law enforcement to investigate the incident. Access for the third-party provider involved has since been revoked to prevent further risk.
The platform has not publicly named the vendor targeted in the breach. Meanwhile, Zendesk, a major customer service software provider used by Discord, told the BBC that its own systems were not compromised and that the breach did not stem from any vulnerability in its platform.
Conflicting Reports and False Claims
Following the announcement, some users online claimed that the breach was larger than Discord initially reported. A Discord spokesperson, however, dismissed those claims as “inaccurate” and said they were part of an attempted extortion effort.
“This was not a ransomware attack,” the spokesperson added. “We will not reward those responsible for their illegal actions.”
Why Cybercriminals Target Personal Data
Cybersecurity experts warn that personal data such as names, ID numbers, and official documents are particularly valuable on the dark web, as they are difficult or impossible to change — unlike passwords or credit card details. Such data is often resold and used in identity theft and online scams.
Discord has recently tightened its age-verification policies amid concerns over misuse of its platform, including reports of servers distributing inappropriate or extremist material. The company says it remains committed to protecting user data and improving account security moving forward.
