Discord Data Breach Exposes Government ID Photos of 70,000 Users

Discord, a popular messaging platform with over 200 million users, recently confirmed a significant data breach involving the exposure of government ID photos for approximately 70,000 users. The breach occurred not within Discord's own systems but through a third-party customer support provider, likely Zendesk, which was compromised by hackers. The attackers gained access to sensitive user data, including names, email addresses, and limited billing information, during interactions with Discord's Customer Support and Trust & Safety teams.

Discord Data Breach Exposes ID Photos of 70,000 Users Through Third-Party CyberattackDiscord denies massive breach, confirms limited exposure of 70K ID photosDiscord Confirms 70,000 Government IDs Exposed in Third-Party BreachWIONDiscord Leaks: 70,000 ID Photos Leaked in Data BreachDiscord Zendesk Breach: What We Know So Far?BBC NewsDiscord Data Breach – 1.5 TB of Data and 2 Million Government ID Photos Extorted

The breach was initially reported on October 3, 2025, when Discord disclosed that hackers targeted a third-party vendor responsible for age verification services. The unauthorized access reportedly lasted for 58 hours, during which the attackers claimed to have stolen 1.5 terabytes of data, including over 2.1 million government ID photos. However, Discord has firmly stated that only around 70,000 users had their ID photos exposed, asserting that the larger figures are part of an extortion attempt by the hackers.

Discord says the recent data breach leaked 70,000 government-ID photosDiscord Data Breach – 1.5 TB of Data and 2 Million Government ID Photos ExtortedDiscord Zendesk Breach: What We Know So Far?TechRadarDiscord Claims 70,000 Government IDs May Have Been Compromised in Recent BreachDiscord confirms government ID photos of users were stolen by hackersDiscord denies massive breach, confirms limited exposure of 70K ID photosThe Discord Breach Might Be Worse Than We Thought, As The Hacker Is Said To Have Two Million Age Verification Photos

The compromised data included:

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

• Government-issued ID images (e.g., driver's licenses, passports)

The Register UK

• Usernames and email addresses

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

• Limited billing information (last four digits of credit cards)

Discord Blinks: Platform Shrugs Off 1.5TB ID Theft Claim as 'Inaccurate', Admits to 70K Affected Users

• IP addresses

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

• Messages exchanged with customer service agents

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

Discord emphasized that full credit card numbers, passwords, and any messages beyond those with customer support were not compromised.

Discord Blinks: Platform Shrugs Off 1.5TB ID Theft Claim as 'Inaccurate', Admits to 70K Affected Users

In response to the breach, Discord's spokesperson, Nu Wexler, stated, “This was not a breach of Discord, but rather a third-party service we use to support our customer service efforts. The numbers being shared are incorrect and part of an attempt to extort a payment from Discord. We will not reward those responsible for their illegal actions.” Discord has taken immediate steps to address the situation, including revoking the compromised vendor's access to its systems and launching an internal investigation with law enforcement assistance.

Discord confirms government ID photos of users were stolen by hackersDiscord Data Breach Exposes ID Photos of 70,000 Users Through Third-Party Cyberattack70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went WrongDiscord Blinks: Platform Shrugs Off 1.5TB ID Theft Claim as 'Inaccurate', Admits to 70K Affected UsersDiscord Leaks: 70,000 ID Photos Leaked in Data BreachEngadgetDiscord Zendesk Breach: What We Know So Far?TechRadar

Despite Discord's assurances, some cybersecurity experts and commentators have raised concerns about the adequacy of the company's data protection measures, particularly regarding the retention of sensitive information like government IDs. Critics argue that the incident highlights vulnerabilities associated with third-party services, which can expose user data even when the primary platform remains secure. Additionally, there are ongoing discussions about the implications of age verification laws that necessitate the collection of such sensitive data.

Discord Reports Potential Leak of 70,000 User ID Photos

While Discord maintains that only 70,000 users were affected, the hackers claim to have accessed data from 5.5 million users, including 2.1 million ID photos. This discrepancy raises questions about the true extent of the breach and the potential risks for users. The attackers have threatened to release the stolen data if their ransom demands are not met, further complicating the situation.

Discord Data Breach – 1.5 TB of Data and 2 Million Government ID Photos Extorted

Discord is actively notifying affected users and advising them to remain vigilant against potential phishing attempts. The company is collaborating with law enforcement and data protection authorities to investigate the breach and enhance its security measures. As the situation develops, users are encouraged to monitor their accounts for suspicious activity and to utilize multi-factor authentication for added security.

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

• “This was not a breach of Discord, but rather a third-party service we use to support our customer service efforts.” — Nu Wexler, Discord Spokesperson

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong

• “Second, the numbers being shared are incorrect and part of an attempt to extort a payment from Discord.” — Nu Wexler, Discord Spokesperson

Discord denies massive breach, confirms limited exposure of 70K ID photos

• “We will not reward those responsible for their illegal actions.” — Nu Wexler, Discord Spokesperson

Discord Reports Potential Leak of 70,000 User ID Photos

This incident underscores the importance of robust cybersecurity practices, particularly when sensitive user data is involved, and highlights the risks associated with third-party service dependencies.

70,000 Discord Users Had Their ID Photos Exposed - Here’s What Went Wrong