Serious Discord's support got hacked

[gluttony]

So, what happened was that Discord's Support team was compromised so if you ever contacted them about any issue like Trust & Safety reports, Billing issues or Age verification that data is now leaked.

If you didn't receive an email by discord then your data is largely safe and you pretty much have nothing to worry about as the main platform itself wasn't compromised, as they sent emails to people who were affected by it. Really sucks for the poor fucks who sent their government IDs to support thanks to retarded AV laws as that's basically a goldmine for identity fraud to whomever gets a hold of it, as well as other info like the last digits of your card (if you bought nitro), IP, email address and name.

Apparently whomever hacked the support team wanted a Ransom out of customer support data, but more likely it's gonna be another breach circulating on the Dark Web with a hefty crypto sum.

tl;dr: if you didn't contact discord support for any reason ur ok.


Sources: https://www.yahoo.com/news/article/discord-users-ids-data-compromised-140053775.html

Discord Hack Exposes User Data Through Compromised Support System

Discord Breach Exposes 70,000 Government IDs in Support Hack

www.cyberkendra.com

 

[aryanmikmaq]

Luckily I’m fine never spent money on there

 

[gluttony]

Luckily I’m fine never spent money on there

You'll be fine even if you bought nitro as long as you never contacted their support teams about it.

 

[aryanmikmaq]

You'll be fine even if you bought nitro as long as you never contacted their support teams about it.

Never did so

 

[zd60]

how exciting im so thrilled glad i dont use that shit

 

[turbocuckcel_7000]

every single service is permeable to hackers because governments demand backdoor access

 

[gluttony]

shit platform anyways, idk why you guys still use it for incel stuff

It won't be too long until this threat actor, if he doesn't get caught, to find a vulnerability in the actual discord application than a third party help desk service but we'll see.

 

[proudweeb]

lol couldn't have happened to a nicer site

 

[gluttony]

every single service is permeable to hackers because governments demand backdoor access

Lol, discord was never encrypted you get about the same security on there as reddit or twitter, only thing they made End-to-end encrypted was Voice and Video calls.

The government can easily just ask discord for user data if they wished and they'd have to comply if compelled by a court order.

 

[Wrath]

I got an email saying my account got breached

 

[gluttony]

I got an email saying my account got breached

 

[Epedaphic]

Lol, discord was never encrypted you get about the same security on there as reddit or twitter, only thing they made End-to-end encrypted was Voice and Video calls.

The government can easily just ask discord for user data if they wished and they'd have to comply if compelled by a court order.

Does encryption even make a huge difference when a subpoena comes into play? Like Whatsapp for example which offers encryption, if the gov't wanted to see something couldn't they easily decrypt it using the encryption key?

 

[turbocuckcel_7000]

Lol, discord was never encrypted you get about the same security on there as reddit or twitter, only thing they made End-to-end encrypted was Voice and Video calls.

The government can easily just ask discord for user data if they wished and they'd have to comply if compelled by a court order.

there's backdoors even in operating systems and CPUs

 

[Leon98]

 

[Leon98]

Over for Discuckcels

 

[carrot]

So, what happened was that Discord's Support team was compromised so if you ever contacted them about any issue like Trust & Safety reports, Billing issues or Age verification that data is now leaked.

If you didn't receive an email by discord then your data is largely safe and you pretty much have nothing to worry about as the main platform itself wasn't compromised, as they sent emails to people who were affected by it. Really sucks for the poor fucks who sent their government IDs to support thanks to retarded AV laws as that's basically a goldmine for identity fraud to whomever gets a hold of it, as well as other info like the last digits of your card (if you bought nitro), IP, email address and name.

Apparently whomever hacked the support team wanted a Ransom out of customer support data, but more likely it's gonna be another breach circulating on the Dark Web with a hefty crypto sum.

tl;dr: if you didn't contact discord support for any reason ur ok.


Sources: https://www.yahoo.com/news/article/discord-users-ids-data-compromised-140053775.html

Discord Hack Exposes User Data Through Compromised Support System

Discord Breach Exposes 70,000 Government IDs in Support Hack

www.cyberkendra.com

Happend yo me as well

 

[gluttony]

Does encryption even make a huge difference when a subpoena comes into play? Like Whatsapp for example which offers encryption, if the gov't wanted to see something couldn't they easily decrypt it using the encryption key?

Yes it does, you have to compel your suspect to hand over the encryption keys to access the contents of their messages or brute force their device with some specialized hardware.

All decryption keys are stored on device locally and are only unlocked after the correct pin/password was entered. End-to-end encryption refers to the way that all messages are only accessable by the sender and recipents as the server hosting would only see ciphertext.

 

[Epedaphic]

Yes it does, you have to compel your suspect to hand over the encryption keys to access the contents of their messages or brute force their device with some specialized hardware.

All decryption keys are stored on device locally and are only unlocked after the correct pin/password was entered.

Ah, interesting, i gotcha!
Actually, i think it can be considered "against the law" somehow to withhold passwords though... like if a court orders you to unlock your phone and you don't, it's somehow against the law. Stupid if you ask me, we also have a law against self-incrimination, the fifth amendment, so i'm not sure why this is a thing.

 

[gluttony]

Ah, interesting, i gotcha!
Actually, i think it can be considered "against the law" somehow to withhold passwords though... like if a court orders you to unlock your phone and you don't, it's somehow against the law. Stupid if you ask me, we also have a law against self-incrimination, the fifth amendment, so i'm not sure why this is a thing.

depends on where you live, there is some software that allows you to enter a fake password to either wipe the device or show a fake drive with random contents.

 

[Animecel2D]

lol couldn't have happened to a nicer site

Over for Discuckcels

 

[Emba]

Big thanks to Maury Braunstein for the ID that I used for my wholesalers license and viza biz card for my truckload of Glenlivet!

Party at my new shed this weekend!

 

[deleted fren]

lol couldn't have happened to a nicer site

 

[gluttony]

Update: It was revealed that at least 70,000 IDs were leaked related to age appeals such as false account bans for being underage and age verification systems.

Discord Data Breach 2025: Around 70,000 ID Photos Leaked in Massive Cyberattack — What Should You Do?

A UK Information Commissioner's Office spokesperson confirmed that there's a massive Discord data breach. Is age verification to blame for it?

www.ibtimes.co.uk

The Hackers however claim to have about 1.5 TERABYTES worth of user data collected from the support chats as they were never deleted affecting about 2.1 Million users.

Discord suffers major cyber attack, potentially data leaking info of over 2 million users

Discord suffers major cyber attack potentially exposing information of more than two million users.

www.cybersecurity-insiders.com

This just goes to show, you can't trust third party providers to have the best cyber security practices in mind, especially when it's not their original purpose to handle stuff such as age verification with government IDs rather than just general customer support.

 

[gluttony]

Ironically the way how the hacker gained access to Discord's zendesk was basically bribing a third party employee (BPO) and then just started spamming requests for info from the API since there wasn't any rate limit or automated system that would flag the 60 million requests he made, it's funny that companies assume that their employees will always have good opsec and never get compromised.

 

[nazianime]

I never liked centralized chat platforms like this, we all know how garbage the discord moderation is, deleting anime and incel communities but keeping tranny groomers employed. Fuck em

 

[anotherwastedlife]

Cybersecurity has gotten worse, data breaches are at an all time high post covid and yet governments and big tech companies are still forcing digital ID, age checks and reliance on the internet for everything

"we don't keep your data bro"
"oops a breach happened, we lied lol"

 

[gluttony]

Cybersecurity has gotten worse, data breaches are at an all time high post covid and yet governments and big tech companies are still forcing digital ID, age checks and reliance on the internet for everything

"we don't keep your data bro"
"oops a breach happened, we lied lol"

Probably the only people who actually care about cybersecurity are like Financial Institutions because obviously they'll get targeted and invest A LOT more into training their staff and securing data since there's actual money on the line. If discord pays the ransom other hackers can just start targeting them as well basically being cucked over and having to pay more.

The guy didn't have to do ANY fancy hacking like literally anyone with a good amount of cash can just bribe some guy in a shitty third world country, barely earning about 10k a year and get full administrative access.

 

[Smiggles]

how exciting im so thrilled glad i dont use that shit

It became full of cucks and troons and furfags

 

[zd60]

It became full of cucks and troons and furfags

I thought it was always that

 

[Smiggles]

I thought it was always that

Probably

 

[gluttony]

I thought it was always that

there was a time when it was somewhat decent in the very early days back in like 2015-2016 because it was basically like teamspeak till about 2017 onwards when all the cucks and troons invaded.

 

[Emba]

Update: It was revealed that at least 70,000 IDs were leaked related to age appeals such as false account bans for being underage and age verification systems.

Discord Data Breach 2025: Around 70,000 ID Photos Leaked in Massive Cyberattack — What Should You Do?

A UK Information Commissioner's Office spokesperson confirmed that there's a massive Discord data breach. Is age verification to blame for it?

www.ibtimes.co.uk

The Hackers however claim to have about 1.5 TERABYTES worth of user data collected from the support chats as they were never deleted affecting about 2.1 Million users.

Discord suffers major cyber attack, potentially data leaking info of over 2 million users

Discord suffers major cyber attack potentially exposing information of more than two million users.

www.cybersecurity-insiders.com

This just goes to show, you can't trust third party providers to have the best cyber security practices in mind, especially when it's not their original purpose to handle stuff such as age verification with government IDs rather than just general customer support.

The new tos prevents you from suing them

 

[zd60]

there was a time when it was somewhat decent in the very early days back in like 2015-2016 because it was basically like teamspeak till about 2017 onwards when all the cucks and troons invaded.

makes sense, they always seem to invade everything. can even find a few that still wander around on irc chats its vile

 

[gluttony]

The new tos prevents you from suing them

that's only if you live the US and Canada I believe but there is a way to opt out (you need to email them though)

 

[Emba]

that's only if you live the US and Canada I believe but there is a way to opt out (you need to email them though)

Certified mail lol

 

[BlueCore]

lol couldn't have happened to a nicer site

 

[anotherwastedlife]

The guy didn't have to do ANY fancy hacking like literally anyone with a good amount of cash can just bribe some guy in a shitty third world country, barely earning about 10k a year and get full administrative access.

If only i had a good sum of money...

 

[Extern]

Common jewcord L