
"A Discord user would make an "age-related appeal" if the platform suspects they may be underage, or if they live somewhere that requires identity verification for platform access. In those cases, users are asked to send a selfie holding their government ID and Discord username to the platform's Trust & Safety team. Discord said it has contacted impacted users, whose exposed data may also include their IP addresses, which can reveal the general area where a user lives."
"Discord disclosed on Wednesday that around 70,000 users may have had sensitive data - like their government ID photos - exposed after hackers breached a third-party vendor that the platform uses for age-related appeals. According to the news site 404 Media, this data breach may be larger than Discord has reported so far. The hackers claim that they stole 1.5 terabytes worth of data, which could encompass much more than 70,000 images. A Discord spokesperson told The Verge that these claims are "incorrect and part of an attempt to extort a payment.""
"Age verification laws, which require users to upload sensitive information like the government IDs exposed in this breach, have been enacted in about half of U.S. states, usually for websites that host pornography. Pornhub, one of the most popular adult video sites, has blocked traffic from these states altogether to avoid enforcing age checks. The U.K.'s Online Safety Act, which went into effect in July, requires a broader range of platforms to verify users' ages, including YouTube, Spotify, Google, X, and Reddit."
Around 70,000 Discord accounts may have had sensitive identity data exposed, including government ID photos and potentially IP addresses, following a breach of a third-party vendor used for age-related appeals. Users submit selfies holding their ID and username when age or location verification is required. Discord said it contacted impacted users. Hackers claim 1.5 terabytes of data were stolen, though Discord described those claims as incorrect and extortionate. The incident highlights privacy risks tied to mandatory age-verification laws, which have been enacted across about half of U.S. states and broadened under the U.K.'s Online Safety Act.
Read at TechCrunch
Unable to calculate read time
Collection
[
|
...
]