Discord: Attackers accessed about 70,000 user photo IDs
Briefly

Discord: Attackers accessed about 70,000 user photo IDs
"Communication platform provider Discord has admitted that around 70,000 users had their government IDs stolen as part of its recent data breach. The breach, which Discord insists occurred at an unidentified third-party customer service provider, involved government ID scans that users upload to verify their age. Some countries have introduced legislation requiring platforms to vet users and ensure only those that meet a certain age threshold are allowed access. The most recent example is the UK with its Online Safety Act."
"Discord's help article states clearly - albeit right at the bottom of the page - that "the information you provide will be used solely for age verification purposes and will not be used for anything else." Regarding how k-ID handles data, it said: "Discord only logs the k-ID age verification results used to unlock your account - it doesn't save your selfie image.""
About 70,000 government ID scans for age verification were stolen in a breach at an unidentified third-party customer service provider. Users upload ID scans to prove age under laws like the UK Online Safety Act, requiring age verification with minimal personal data. Discord offers two age‑verification methods: a manual selfie holding an ID and username, and an automated k‑ID system that reportedly only logs results. British teenagers bypassed k‑ID using a copy of Death Stranding. Discord's help page says provided information will be used solely for age verification. Questions remain why Discord retains ID scans instead of only verification outcomes.
Read at Theregister
Unable to calculate read time
[
|
]