Discord reveals 70,000 users government IDs may have been compromised

Published: Thursday, October 9, 2025 at 6:40 am

Discord Data Breach Exposes Government IDs of 70,000 Users

Discord, the popular voice chat and messaging platform, has disclosed a security breach that potentially exposed the government IDs of approximately 70,000 users. The breach involved a third-party service used by Discord for customer service management. The malicious actor gained access to this service, allowing them to view user information, including government IDs collected for age verification purposes.

The company stated that all affected users globally have been contacted and that they are working closely with law enforcement, data protection authorities, and external security experts. While the number of affected users represents a small fraction of Discord's 200 million monthly active users, the breach raises significant concerns about user data security.

In addition to government IDs, other personal data was also compromised. This includes users' names, contact details, IP addresses, purchase histories, and the last four digits of their credit cards. Discord has stated that full credit card numbers and passwords were not accessed.

Discord emphasized that the company itself was not breached, but rather the third-party service. The company has stated it will not pay a ransom to the malicious actor.

The age verification system, implemented in some regions earlier this year, required users to submit a selfie or a photo of their ID. Discord partners with k-ID to verify users' ages, though it's unclear if this was the compromised third-party service. Both Discord and k-ID delete images of users' IDs immediately after age confirmation.

BNN's Perspective:

This incident highlights the ongoing challenges of data security in the digital age. While the scale of the breach is relatively small compared to Discord's overall user base, the exposure of sensitive personal information, including government IDs, is a serious concern. The incident underscores the importance of robust security measures and the potential risks associated with relying on third-party services. It also raises questions about the effectiveness of age verification methods and the need for a balanced approach that prioritizes both user safety and privacy.

Keywords: Discord, data breach, security, government IDs, user data, privacy, age verification, third-party service, customer service, personal information, credit card, breach, k-ID, security experts, law enforcement, data protection, user safety

Full Story