Massive Discord Breach Leaks Thousands of Government ID Photos
In a serious data breach, Discord has confirmed that approximately 70,000 users had their government-issued ID photos exposed after a third-party vendor used for age verification and support services was compromised. The breach affects users who submitted ID documents during appeals or identity verification processes on the platform.
Discord clarified that its core systems were not breached; instead, the attack targeted an external service provider. Although the attackers reportedly claimed to have stolen over 2 million IDs and demanded a $3.5 million ransom, Discord denies this figure and has refused to pay. The company has since terminated the vendor’s access and notified affected users while cooperating with law enforcement.
The breach raises serious privacy and security concerns. Government IDs contain immutable personal information—full names, birthdates, photos, and ID numbers—which can be exploited for identity theft, financial fraud, or impersonation. Unlike passwords or credit cards, this data cannot easily be changed.
This incident underscores the growing risk of relying on third-party services for sensitive data handling. Users affected should monitor for signs of identity misuse and phishing attempts. More broadly, the event highlights the urgent need for privacy-first verification systems and tighter oversight of vendors handling personal data.
References:
https://www.theguardian.com/media/2025/oct/09/hack-age-verification-firm-discord-users-id-photos
https://www.theverge.com/news/797051/discord-government-ids-leaked-data-breach
________
One more thing, at Pfortner, we take communications privacy very seriously. We encrypt email, messaging and network communications to provide our clientele with uncompromised privacy.
If you need to protect sensitive communications, please see www.pfortner.co.za or send an email to info@pfortner.co.za, and we will get back to you.