Discord Data Breach Affects More Than 70,000 Users

On Wednesday, Discord announced that around 70,000 users may have had their sensitive information — including government ID photos — compromised due to a breach at a third-party vendor used for age verification appeals.

Users who are suspected of being underage or reside in regions where identity verification is necessary can file an “age-related appeal.” In these cases, they are required to provide a selfie holding their government ID along with their Discord username to the Trust & Safety team.

Discord has reached out to affected users, informing them that the leaked information may also include their IP addresses, which can reveal their general location.

According to 404 Media, the data breach might be more significant than what Discord has reported. The hackers claim to have obtained 1.5 terabytes of data, which could surpass the 70,000 images mentioned. A Discord spokesperson told The Verge that these claims are “inaccurate and part of an extortion attempt.”

This incident highlights concerns raised by digital rights advocates regarding the intention behind age checks as a means to make the internet “safer.”

Many U.S. states (approximately half) have passed age verification laws requiring the submission of sensitive information, such as government IDs involved in this breach, mainly for adult content sites. For instance, Pornhub, a leading adult video platform, has entirely stopped access from these states to avoid implementing age checks.

Meanwhile, the U.K.’s Online Safety Act, which became effective in July, mandates a broader range of platforms, including YouTube, Spotify, Google, X, and Reddit, to verify users’ ages.