Discord confirmed a security breach involving a third-party customer service provider that exposed sensitive user support data but did not compromise the platform’s main infrastructure or private messages.
The company said in a statement that an external attacker gained unauthorized access to the systems of a customer service vendor used by Discord. The breach, discovered during an internal investigation, allowed the attacker to access a limited amount of data tied to users who had interacted with Discord’s Customer Support or Trust & Safety teams.
According to Discord, the compromised data includes user names, email addresses, Discord handles, contact details from support tickets, limited billing metadata such as payment methods and the last four digits of credit cards, as well as IP addresses and chat transcripts with support staff. A small number of uploaded government ID documents, used for age verification appeals, were also exposed.
The company emphasized that no passwords, full credit card numbers, CVV codes, or authentication data were compromised. Discord said it immediately revoked the vendor’s access, hired a digital forensics firm, and notified law enforcement authorities.
While Discord did not name the attacker, cybersecurity analysts believe the incident may be linked to the Scattered LAPSUS$ Hunters group, which has previously targeted major cloud service providers.
Discord, which has over 150 million active monthly users, has warned users to remain alert for phishing attempts or fraudulent communications related to the breach.
The company stated it will not reach out to affected users via phone and urged them to verify any messages that request personal information.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.