Discord has issued a warning to users after a third-party customer support provider, Zendesk, suffered a data breach on September 20th. As reported by the Malwarebytes Labs blog, attackers compromised the Zendesk systems which gave them access to Discord’s user data. They were then able to steal data including real names, Discord usernames, email addresses, IP addresses and details and messages with support agents.
Some billing information was also taken, including payment type, last four digits of credit card numbers and purchase histories. In the advisory notice, Discord explained that some users also had their government IDs taken as well — either their driver’s licenses or passports depending on what they used to appeal an age determination. Users who may have had this information exposed will be notified of this specifically in the email they receive.
