Proof-of-age ID leaked in Discord data breach

"The data compromised may have included usernames, email, billing information, the last four digits of credit card numbers, IP addresses and messages with customer support. Discord said the alleged attacker also gained access to a small number of government ID images (eg driving licence, passport) from users who had appealed an age determination. Affected users were in the process of being notified as of last week. If your ID may have been accessed, that will be specified in the email you receive, Discord said."

"The company stated last week that an unauthorised party had compromised one of Discord's third-party customer service providers, leading to the access of a limited number of users who had been in contact with the customer service or trust and safety teams. The support system was targeted to access user data with a view to extort a financial ransom from Discord, the company stated."

"The company said facial images and ID images are deleted directly after ages are confirmed, but Discord's website noted that if verification fails, users can contact the trust and safety team for a manual review. Under the under 16s social media ban to come into effect on 10 December, the Australian government has outlined that it expects platforms such as Discord which is one of the platforms that has been asked to assess if it is required to comply"

An unauthorised party compromised a third-party customer service provider used by Discord, accessing data for a limited number of users who contacted customer service or trust and safety. Compromised information may include usernames, email, billing information, last four credit card digits, IP addresses and messages with customer support, and a small number of government ID images from age appeals. The support system was targeted for financial extortion. Discord revoked the provider's access, launched an internal investigation, engaged law enforcement, and began notifying affected users. Facial age assurance and deletion policies apply to verification images.

Read at www.theguardian.com