Discord - Data Breach
Executive Summary
Discord notified 180 users that their personal information, including email addresses and support ticket data, was exposed when a threat actor compromised a third-party customer support agent's account in March 2023. At least one affected user in Maine had their name and driver's license or state ID number accessed through compromised support tickets. The breach is separate from a recent incident at third-party service Discord.io, which exposed data from nearly 760,000 users.
What Happened
In March 2023, a threat actor compromised a third-party customer support agent's account used by Discord, gaining unauthorized access to the support ticket queue. Discord discovered the incident and completed an investigation by June 13, 2023, determining that 180 users had their personal information exposed, including email addresses, support ticket contents, and communications with Discord support. At least one user in Maine had their name and driver's license or state ID number accessed through the compromised support tickets.
Who Is Affected
A total of 180 Discord users are affected by this breach, with at least one individual in Maine having sensitive government-issued identification information compromised. All 180 affected users had their email addresses and support ticket data exposed, including any personal information they may have shared in their communications with Discord's customer support team.
Why It Matters
This incident demonstrates the privacy risks that arise when platforms rely on third-party vendors for customer support operations, as the security of user data depends on the weakest link in the vendor chain. The exposure of government-issued ID numbers represents a significant escalation beyond typical email address leaks, as such information can be used for identity theft and fraud. The breach also highlights the prolonged timeline between when incidents occur and when users are notified - over two years passed between the March 2023 compromise and the June 2025 disclosure.
What You Should Do
If you are among the 180 notified users, monitor your accounts closely for signs of unauthorized access or identity theft, particularly if you submitted identification documents to Discord support. Consider placing a fraud alert or credit freeze with major credit bureaus if your driver's license or state ID number was compromised. Review your Discord account security settings, enable two-factor authentication if you haven't already, and be vigilant for phishing attempts that may reference details from your support tickets.
Summary generated from verified sources and reviewed before publication. How we summarize.