Discord customer service data breach leaks user info and scanned photo IDs

Discord, a popular communication platform, has disclosed a data breach involving one of its third-party customer service providers. According to the company, an unauthorized party gained access to information from a limited number of users who had contacted Discord's Customer Support or Trust & Safety teams. The breached data includes names, usernames, emails, and the last four digits of credit card numbers. Additionally, a small number of government ID images from users who had appealed an age determination were also accessed. Discord states that full credit card numbers and passwords were not impacted by the breach. The company has taken immediate action, including revoking the support provider's access to its ticketing system, notifying data protection authorities, and collaborating with law enforcement. Discord has also reviewed its threat detection systems and security controls for third-party support providers to prevent similar incidents in the future. The company is now notifying the affected users via email and providing specific details if their ID information was accessed. Discord has emphasized that the unauthorized party did not gain direct access to its systems, and the company is committed to addressing the situation and protecting its users' data.