Discord Data Breach Affects at Least 70,000 Users
A data breach has compromised the sensitive information of approximately 70,000 Discord users, according to the platform's disclosure on Wednesday. The hackers breached a third-party vendor that handles age-related appeals, exposing government ID photos and potentially revealing users' IP addresses.
Discord has confirmed that affected users have been contacted and notified about the breach. The company stated that the exposed data may include IP addresses, which can be used to determine a user's general location. However, Discord emphasized that it has taken steps to secure its systems and prevent further breaches.
The hackers claim to have stolen 1.5 terabytes of data, which could encompass more than just the reported 70,000 images. A Discord spokesperson disputed these claims, attributing them to an extortion attempt. The company's stance is supported by digital rights activists who have long expressed concerns about age checks on online platforms.
Age verification has been a contentious issue in the tech industry, with some arguing that it compromises user anonymity and creates new security risks. "The use of age checks as a means of making the internet safer is a flawed approach," said Sarah T. Roberts, a digital rights activist. "It's a misguided attempt to regulate online behavior, which ultimately puts users at greater risk."
Discord's reliance on third-party vendors for age-related appeals has raised questions about data security and vendor management. The platform's use of these vendors allows it to comply with regulations in countries that require identity verification for platform access.
The breach highlights the importance of robust data protection measures and vendor management practices. "This incident serves as a reminder that even well-established companies like Discord can fall victim to data breaches," said Mark Stanislav, a cybersecurity expert. "It's essential for platforms to prioritize data security and implement effective measures to prevent such incidents."
Discord has not disclosed the extent of the breach or the specific actions it will take to address the issue. The company's response to the incident is being closely watched by industry observers and users alike.
As the situation unfolds, Discord users are advised to remain vigilant about their online security and report any suspicious activity to the platform's Trust Safety team.
*Reporting by Techcrunch.*
