Discord, a messaging platform popular with gamers, has announced that the official ID photos of approximately 70,000 users may have been leaked due to a cyber-attack. According to the company, which boasts a user base of over 200 million worldwide, hackers targeted a third-party firm responsible for age verification, but the Discord platform itself has not been compromised.
Users provide ID photos to validate their age on Discord, which serves as a networking hub for gamers to communicate and share files. The leaked data could include personal information, partial credit card details, and exchanges with Discord's customer service agents, as stated by the San-Francisco-based company.
However, Discord clarified that no complete credit card information, passwords, or messages beyond those related to customer support were leaked. All affected users have been contacted, and Discord is collaborating with law enforcement to probe the breach.
The platform has since revoked the access of the third-party customer support provider involved in the incident but has not disclosed the company's identity. Zendesk, the customer service software provider for Discord, affirmed that its systems were not compromised, distancing itself from the breach.
Some online commentators have alleged that the data breach is more extensive than Discord has reported. In response, a spokesperson for the platform described these claims as inaccurate and part of an extortion attempt, emphasizing that the breach was not a ransomware attack. 'We will not reward those responsible for their illegal actions,' the spokesperson added.
Cybercriminals frequently target personal data, which can fetch a high price on the black market for scams. Information like full names and official ID numbers holds significant value due to its lasting nature, compared to credit card details that change over time.
Discord has previously fortified its age-verification processes to address concerns about inappropriate content distribution on its platform. This recent breach has reignited discussions on the importance of robust data security measures in digital communications.
