Discord Data Breach Affects Thousands of Users

Published
October 27, 2025
Updated
October 27, 2025
Discord Data Breach Affects Thousands of Users
Discord
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Discord

data breach?

Join the Lawsuit

It's free to join. 

Discord, a leading provider of online communication and community platform, experienced a data breach affecting an estimated 70,000 users, according to the company. The cybersecurity incident occurred when an unauthorized actor gained access to user information housed by third-party customer service provider.

The incident was a ransomware attack. According to reports, the unidentified threat actors claimed to have stolen as much as 1.6 terabytes of Discord data. A ransom of as much as $5 million was demanded, which Discord did not pay.

Information exposed in the cyberattack included names, Discord username, email address, contact information provided to Discord customer support, IP addresses, messages with customer service agents, government ID images if provided by user and billing information including payment type, last four digits of credit card numbers and purchase histories. Discord published a security incident notice on its website on Oct. 3, 2025 and emailed impacted users.

The data breach was disclosed to the Texas Attorney General's office on Oct. 27, 2025, reporting 1,425 residents impacted. The exposure of government-issued identification pictures, in addition to other personal information, puts users at risk for identity theft and fraud.

Discord's response

After discovering the data breach, Discord revoked the third-party vendor's access to its internal systems and user information and notified law enforcement. In addition to providing written notice via email to impacted users, the company is making required legal disclosures.

If you believe your personal information may have been compromised in this breach:

  • Carefully review any notice or communication you receive from Discord that does business with IMDataCenter.
  • Monitor financial accounts and credit reports for signs of identity theft.
  • Consider placing fraud alerts or credit freezes with the major credit bureaus.
  • Be cautious of unsolicited emails or phone calls requesting personal information.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image