Could You Be Affected by the Discord Data Breach?

Discord confirmed that one of its third-party customer service providers was compromised by an unauthorised party. This allowed the alleged attacker to access data belonging to some users who had contacted Discord’s Customer Support or Trust & Safety teams. 

According to Discord, the data may include: 

• Usernames and email addresses 

• Billing information and IP addresses 

• The last four digits of credit card numbers 

• Messages exchanged with customer support 

• In some cases, scans of government-issued ID (such as passports or driving licences) used for age verification 

Discord hasn’t released exact figures but says the incident affected a “limited number” of users. The company is notifying everyone whose data may have been exposed. 

No. Discord has confirmed that full credit card numbers, CVV codes and account passwords were not compromised.  

Discord asks for ID from some users who appeal an age determination or go through manual verification as part of its age assurance process. These ID images were stored by its third-party provider and are among the most sensitive data affected. 

Discord is contacting affected users directly by email.  

• Monitor your bank accounts and credit reports for unusual activity. 

• Be wary of scam calls, texts or emails referencing Discord or the breach. 

• Change any reused passwords and enable two-factor authentication on your accounts. 

• Avoid clicking on links in suspicious messages. 

Discord stated that the attackers attempted to extort money following the breach, but it has not confirmed whether a ransom was paid. The company has since revoked the vendor’s system access and is working with law enforcement.

Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.

By registering, you’ll stay up to date with any developments — from investigations to possible legal action. You’ll also help bring people together, showing that customers want answers, accountability and stronger data protection from the companies they trust. 

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.