Discord says 70,000 users may have had their government IDs leaked in breach

Discord has identified astir 70,000 users that whitethorn person had their authorities ID photos exposed arsenic portion of a lawsuit work information breach announced past week, spokesperson Nu Wexler tells The Verge. A tweet by vx-underground said that the institution was being extorted implicit a breach of its Zendesk lawsuit by a radical claiming to person “1.5TB of property verification related photos. 2,185,151 photos.” 

When we asked astir the tweet, Wexler shared this statement:

Following last week’s announcement astir a information incidental involving a third-party lawsuit work provider, we privation to code inaccurate claims by those liable that are circulating online. First, arsenic stated successful our blog post, this was not a breach of Discord, but alternatively a third-party work we usage to enactment our lawsuit work efforts. Second, the numbers being shared are incorrect and portion of an effort to extort a outgo from Discord. Of the accounts impacted globally, we person identified astir 70,000 users that whitethorn person had government-ID photos exposed, which our vendor utilized to reappraisal age-related appeals. Third, we volition not reward those liable for their amerciable actions.

All affected users globally person been contacted and we proceed to enactment intimately with instrumentality enforcement, information extortion authorities, and outer information experts. We’ve secured the affected systems and ended enactment with the compromised vendor. We instrumentality our work to support your idiosyncratic information earnestly and recognize the interest this whitethorn cause.

In its announcement last week, Discord said that accusation similar names, usernames, emails, the past 4 digits of recognition cards, and IP addresses besides whitethorn person been impacted by the breach.