







Discord, a leading provider of online communication and community platform, experienced a data breach affecting an estimated 70,000 users, according to the company. The cybersecurity incident occurred when an unauthorized actor gained access to user information housed by third-party customer service provider.
The incident was a ransomware attack. According to reports, the unidentified threat actors claimed to have stolen as much as 1.6 terabytes of Discord data. A ransom of as much as $5 million was demanded, which Discord did not pay.
Information exposed in the cyberattack included names, Discord username, email address, contact information provided to Discord customer support, IP addresses, messages with customer service agents, government ID images if provided by user and billing information including payment type, last four digits of credit card numbers and purchase histories. Discord published a security incident notice on its website on Oct. 3, 2025 and emailed impacted users.
The data breach was disclosed to the Texas Attorney General's office on Oct. 27, 2025, reporting 1,425 residents impacted. The exposure of government-issued identification pictures, in addition to other personal information, puts users at risk for identity theft and fraud.
After discovering the data breach, Discord revoked the third-party vendor's access to its internal systems and user information and notified law enforcement. In addition to providing written notice via email to impacted users, the company is making required legal disclosures.
If you believe your personal information may have been compromised in this breach:

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)