One of the worst case scenarios for ID age verification is already here, with a Discord breach compromising some users' data

Discord hackers distribute malware that can stay persistent for months — (Image credit: TheDigitalArtist - Pixabay & Discord)

As reported by The Verge, Discord has announced that one of its third-party customer service partners was recently compromised by an "unauthorized party," who Discord states was attempting to "extort a financial ransom."

While the hackers did not gain access to Discord directly, some users' data was impacted by the breach⁠—specifically data shared with Discord's Customer Support and Trust & Safety teams, including government IDs shared for age verification.

Discord stated in a press release that anyone impacted by the breach will be contacted soon over email. The types of data potentially at risk include names, Discord usernames, email addresses, contact information, payment types, the last four digits of credit card numbers (but not CCVs or full credit card numbers), purchase history, IP addresses, messages shared with customer support, and "limited corporate data."

The most concerning data caught in the breach is a limited number of government ID images shared with Discord for age verification purposes, such as passports or driver's licenses. Discord added that, "If your ID may have been accessed, that will be specified in the email you receive." Notably, no passwords, authentication data, or messages "beyond what users may have discussed with customer support" was compromised in the breach. Discord also stated that it has revoked the impacted customer support partner's access to its systems.

This data breach at Discord makes it clear why people around the world are concerned and frustrated by these policies—even beyond issues of censorship, there are clear risks involved in giving scans and photos of sensitive data like government IDs to companies that might not have the security to protect that data.

Stevie Bonifield is a freelance tech journalist specializing in mobile tech, gaming gear, and accessories. Outside of writing, Stevie loves indie games, TTRPGs, and building way too many custom keyboards.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.