Discord user data leaked online; company confirms breach

Discord has confirmed a significant user data breach, stating the incident was not the result of a compromise of its own servers but arose from an attack on 5CA, the third‑party contractor that manages its customer support.

The company estimates that around 70,000 users worldwide were affected. Stolen materials include scans of passports, identity cards and driver’s licences. Attackers also obtained contact information — names, usernames, email addresses and IP addresses — support correspondence, and partial payment details such as the last four digits of card numbers and purchase histories.

Discord emphasised that passwords, CVV codes and private messages were not exfiltrated. The company is cooperating with law enforcement and will notify all impacted users.

However, Cyber Security News reports the scale of the breach may be substantially larger. The group Lapsus$ Hunters claims to have taken 1.5 terabytes of data — more than 2.1 million document scans and records relating to 5.5 million users. They say the perpetrators had access to the database for roughly 58 hours by using a compromised account belonging to a 5CA support agent. Experts observe that such incidents are on the rise, with attackers increasingly focusing on third‑party vendors rather than directly assaulting well‑protected corporations.

Source: iXBT.games