Discord third-party support breach exposed some user data — what to do
On September 20, a third‑party customer support provider used by Discord was compromised, giving unauthorized access to some users’ support records. Discord says it was not directly hacked; only data handled by that vendor is affected.
What was exposed
- Real name and username (if provided)
- Email and other contact details
- IP addresses and logs
- Payment info limited to the last four digits of credit cards and payment type
- Messages exchanged with Customer Support/Trust & Safety
- In a small number of cases, government IDs (driver’s licenses, passports) submitted for age verification
Discord says full credit card numbers, physical addresses, passwords, and in‑service messages (DMs/servers) were not exposed.
Who is affected
Only people who have contacted Discord Customer Support or Trust & Safety are at risk — that includes people who no longer have an account or never had one. If you never contacted Discord support, you were not affected.
Discord’s response
- Revoked the third‑party provider’s access
- Notified law enforcement
- Says it will frequently audit third‑party systems
- Sending email notices to people whose data was accessed; the notice will specify if any ID you submitted was included
What you should do now
- Check your email for an official notice from Discord (and check spam/junk folders)
- If you received a notice, follow any guidance provided and consider placing fraud alerts with credit bureaus
- Monitor bank and card statements for suspicious activity; the breach may include only the last four digits of cards, but watch for unauthorized charges
- Consider identity‑theft protection services if your government ID was exposed
- Be extra cautious of phishing emails or calls claiming to be from Discord; Discord won’t ask for passwords by email
References
- BleepingComputer: Hackers steal identifiable Discord user data in third-party breach
- Discord Safety News
If you want, I can add an identity protection product link (Amazon) or help draft a response if you received Discord’s notice.