Discord has disclosed a knowledge breach that compromised the private data and identification paperwork of a restricted variety of customers. The incident was traced again to a safety breach at Zendesk, a third-party firm offering buyer assist providers for the platform.
In a statement revealed on October 3, 2025, Discord reported that an unauthorized actor gained entry to its buyer assist ticket system, the place confidential consumer information was saved. In response to HackRead, the corporate clarified that its foremost infrastructure remained safe and that the attackers’ main motive gave the impression to be monetary extortion.
What Data Was Affected
The breach impacted customers who had beforehand interacted with Discord’s Assist or Belief & Security groups. The uncovered information contains:
-
Full names, usernames, and e-mail addresses
-
Messages exchanged with assist brokers
-
Restricted billing data, similar to fee strategies and the final 4 digits of fee playing cards
-
Identification paperwork like driver’s licenses and passports used for age verification
The inclusion of official ID paperwork among the many stolen information will increase the potential threat of identification theft. Discord has not disclosed what number of customers had been affected however confirmed that every one impacted people have been notified through e-mail from noreply@discord.com.
There is no such thing as a data but on who was chargeable for the assault or how lengthy the unauthorized entry lasted. Upon discovering the breach, Discord instantly revoked Zendesk’s entry to inside techniques, launched a forensic investigation with cybersecurity specialists, and alerted related information safety authorities. The corporate harassed that passwords, personal messages, and full bank card particulars weren’t compromised however suggested customers to remain alert for phishing or suspicious communications.
Hacker Group Claims Accountability
Though Discord has not formally recognized the perpetrators, a hacker coalition calling itself Scattered LAPSUS$ Hunters has taken credit score for the assault. The group, reportedly a merger of members from Scattered Spider, Lapsus$, and ShinyHunters, shared screenshots on Telegram allegedly exhibiting entry to Discord’s inside administrative and information privateness panels.
Of their posts, the hackers mocked Discord’s safety measures, together with its use of Okta and Kolide for entry administration. Additionally they claimed to own extra undisclosed data and threatened to launch it on their “Knowledge Leak Web site” (DLS), a platform used for publishing or promoting stolen information.
Discord reminded customers to be cautious of potential scams exploiting the breach and reiterated that the corporate is not going to contact anybody by cellphone relating to this situation.
Trending Merchandise
Wi-fi Keyboard and Mouse Combo, 2.4G Silent Cordless Keyboard Mouse Combo for Home windows Chrome Laptop computer Laptop PC Desktop, 106 Keys Full Measurement with Quantity Pad, 1600 DPI Optical Mouse (Black)
TP-Hyperlink AX5400 WiFi 6 Router (Archer AX73)- Twin Band Gigabit Wi-fi Web Router, Excessive-Pace ax Router for Streaming, Lengthy Vary Protection, 5 GHz
NETGEAR Nighthawk WiFi 6 Router (RAX43) – Security Features, 5-Stream Dual-Band Gigabit Router, AX4200 Wireless Speed (Up to 4.2 Gbps), Covers up to 2,500 sq.ft. and 25 Devices
TP-Hyperlink AC1200 Gigabit WiFi Router (Archer A6) – Twin Band MU-MIMO Wi-fi Web Router, 4 x Antennas, OneMesh and AP mode, Lengthy Vary Protection
