Discord says 70,000 users may have had their government IDs leaked in breach

"Following last week's announcement about a security incident involving a third-party customer service provider, we want to address inaccurate claims by those responsible that are circulating online. First, as stated in our blog post, this was not a breach of Discord, but rather a third-party service we use to support our customer service efforts. Second, the numbers being shared are incorrect and part of an attempt to extort a payment from Discord."

"Of the accounts impacted globally, we have identified approximately 70,000 users that may have had government-ID photos exposed, which our vendor used to review age-related appeals. Third, we will not reward those responsible for their illegal actions. All affected users globally have been contacted and we continue to work closely with law enforcement, data protection authorities, and external security experts. We've secured the affected systems and ended work with the compromised vendor."

A third-party customer service vendor experienced a security incident that exposed user data; Discord's platform was not breached. Approximately 70,000 users worldwide may have had government-ID photos exposed; the vendor used those photos to review age-related appeals. Public numbers being circulated are incorrect and tied to an extortion attempt demanding payment. All affected users globally have been contacted. Discord has secured the affected systems and ended its relationship with the compromised vendor. Discord continues to work closely with law enforcement, data protection authorities, and external security experts and will not pay extortion, emphasizing responsibility to protect personal data and acknowledging user concern.

Read at The Verge