ID Photos of Tens of Thousands of Accounts Potentially Were Compromised, Discord Says
Discord, a messaging platform popular with gaming communities, reports that government identification images of about 70,000 users may have been exposed following a cyber-attack.
Third-Party Service Compromised
The platform, which maintains in excess of 200 million users globally, confirms that hackers had breached a provider that assisted in confirming the ages of its users but Discord's own systems was not compromised.
Account holders can provide identification images to confirm their age on Discord - a communication platform for gamers to interact and distribute materials with others in the video game ecosystem.
Extent of Data Exposure
The compromised details potentially contains individual details, fragmentary financial data and correspondence that were shared with the company's help desk staff.
No full credit card details, passwords, or communications and user actions outside of interactions with Discord's help desk representatives were compromised, the organization said.
Response Measures
Every affected account holder have been contacted and Discord is collaborating with law enforcement to investigate the matter, it added.
The company announced it has revoked the customer support provider's access to the platform that was compromised in the attack. Discord did not name the third-party company involved.
Divergent Reports
Some internet observers have claimed that the security incident was larger than Discord has revealed.
A official for Discord declared that those assertions are false and "part of an attempt to demand money" from the company.
"We refuse to compensate those accountable for their criminal activities," the spokesperson continued.
Significance of Personal Data
Cybercriminals frequently target personal data, which can fetch substantial sums on the underground economy for use in fraudulent schemes.
Information like complete identities and government identification codes is especially valuable because, unlike credit card details, it generally stays constant over time.
Earlier Protection Measures
Discord has earlier reinforced its age-verification measures in reaction to apprehensions that certain channels on the platform were being used to distribute inappropriate and harmful content.
- Approximately 70,000 users affected
- Partner authentication service firm breached
- Fragmentary financial information possibly leaked
- Help desk correspondence could have been obtained
- Authorities involved in examination