Skip to content

Discord

Disclosed Oct 3, 202511 months ago74,729 affectedConfirmed

Official notice

Discord vendor breach exposes ID photos of about 70,000 users

Discord said hackers breached a third-party customer service vendor handling age-related appeals, exposing government ID photos of about 70,000 users plus names, emails, IP addresses, support messages and partial billing data; attackers claimed far more.

What is known

People affected74,729 (as reported by the organization)
DisclosedOct 3, 2025
DiscoveredSep 25, 2025
HappenedSep 20, 2025
AttackVendor breach
Data exposedGovernment IDs, IP addresses, Names, Emails, Messages, Payment cards, Dates of birth, Addresses
SectorTech · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Discordoag.ca.gov · Official notice
Discord data breach affects at least 70,000 userstechcrunch.com · News
Discord discloses data breach after hackers steal support ticketsbleepingcomputer.com · News
Texas Attorney General data security breach report BR-0004706: Discordoag.my.site.com · Official notice
Vermont Attorney General: 2025-12-29 Discord Data Breach Notice to Consumersago.vermont.gov · Official notice
Indiana Attorney General 2025 data breach report: Discordin.gov · Official notice

Notices filed

WhereFiledPeople
ResearchtotalOct 3, 202570,000
Indiana AGresidents of INNov 24, 2025225
California AGresidents of CANov 26, 2025
Texas AGresidents of TXDec 5, 20251,465
Vermont AGresidents of VTDec 29, 2025

Other breaches at Discord

BreachAffected
Disclosed Aug 21, 2023Aug 21, 20233 years ago180
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-29-discord-data-breach-notice-consumers · backfill source
  • 2026-09-25 · data_types: ["government-id","ip-addresses","names","emails","messages","payment-card"] to ["government-id","ip-addresses","names","emails","messages","payment-card","dob","addresses"] · backfill source
  • 2026-09-25 · records: 70000 to 74729 · backfill source
  • 2026-09-25 · discovered: empty to 2025-09-25 · backfill source
  • 2026-09-25 · attack: unknown to third-party · seed source
  • 2026-09-25 · data_types: [] to ["government-id","ip-addresses","names","emails","messages","payment-card"] · seed source
  • 2026-09-25 · records_basis: empty to organization · seed source
  • 2026-09-25 · records: empty to 70000 · seed source
  • 2026-09-25 · disclosed: 2025-11-26 to 2025-10-03 · seed source
  • 2026-09-25 · summary: empty to Discord said hackers breached a third-party customer service vendor handling age-related appeals, exposing government ID photos of about 70,000 users plus names, emails, IP addresses, support messages and partial billing data; attackers cla · seed source
  • 2026-09-25 · title: empty to Discord vendor breach exposes ID photos of about 70,000 users · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Discord

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.