One of Discord’s third-party customer service providers was illegally infiltrated by hackers. The hackers claim they have obtained 1.5TB of personal information used for verification, including government-issued IDs (passports and driver’s licenses).
“An unauthorized party targeted our third-party customer support services to access user data, with a view to extort a financial ransom,” Discord wrote on its website. The popular communication platform for gamers said the data that may have been impacted includes:
ALSO READ: Reactions Continue To Trail The Outsiders Shuttering 48 Hours After
- Name, username, email, and other contact details
- Limited billing information, e.g., the last four digits of a credit card
- IP addresses
- Messages with customer service agents
- Internal presentations and training materials
An update to the attack posted on X by Discord Previews read, “We have become aware that the perpetrators of this attack claim to have obtained 1.5 TB of age-verification photos totaling 2,185,151 images, which they are now using to extort Discord”.
Update: We have become aware that the perpetrators of this attack claim to have obtained 1.5 TB of age-verification photos totalling 2,185,151 images, which they are now using to extort Discord. https://t.co/iCPl7ljQLy pic.twitter.com/cTrnDCaTeu
— Discord Previews (@DiscordPreviews) October 8, 2025
The company maintained that the hackers did not access any information “beyond what users may have discussed with Customer Support or Trust & Safety agents”. They also said they are working with law enforcement to investigate the matter—and will email impacted users. Other relevant data protection authorities have also been notified.
Security experts have been sounding the alarm, warning of the dangers of collecting personal information like government-issued IDs. Some have called it a disaster waiting to happen. Discord hack further reinforces their concern.
According to the company, the hackers don’t have access to full credit card numbers, CCV codes, messages or activity on the platform (except communications with customer support), passwords, or authentication data.
Discord has advised impacted users to be on alert to detect suspicious messages and communications. When in doubt, contact service agents to answer questions and provide additional support.
Following the Discord hack, are you still comfortable with providing personal data for age verification? Share your thoughts in the comment box below.
