Discord: Personal information leaked due to unauthorized access; contact details, driver's license, and passport images exposed
Note: the original Japanese article can be found at:
https://www.4gamer.net/games/999/G999905/20251006022/
Editorial Department: Yawaragi | 2025/10/06 05:02 (UTC)
Discord has announced that on October 3, 2025, unauthorized third-party access led to the breach of some user personal information.
※ Image sourced from Discord’s official website Thumbnail image No.001 / Discord: Personal data leaked due to unauthorized access. Contact details, driver’s license and passport images, etc.
The affected data relates to the company’s customer service system. The potentially exposed information includes:
- Names, Discord usernames, email addresses, and other contact details provided to Discord customer support
- Some billing information such as payment methods, last four digits of credit card numbers, and purchase history associated with accounts
- IP addresses
- Messages exchanged with customer service representatives
- Portions of corporate data (training materials, internal presentations)
- Images of identification documents such as driver’s licenses or passports submitted by users who disputed age verification
Note that full credit card numbers, CVV codes, passwords, authentication data, messages and activities on Discord (excluding interactions with customer support) were not affected.
Discord has notified relevant data protection authorities, is actively cooperating with law enforcement agencies to investigate this incident, and has reviewed its threat detection systems and security management practices for third-party support providers.
Additionally, users whose personal information was compromised are being contacted via email from the address “[email protected].” If there’s a possibility that images such as driver’s licenses or passports were accessed, this will be explicitly mentioned in the message.
All communications regarding this incident will come only through emails sent from this address—no phone calls will be made. Users are strongly advised to remain vigilant against suspicious messages and other forms of contact going forward.