As reported on by the BBC, on September 20, 2025, a third-party provider called 5CA was compromised. The company supports Discord’s customer service and age verification appeals.
The breach lasted 58 hours, and is believed to be carried out by the groups known as Scattered Spider, LAPSUS$ and ShinyHunters. Discord confirmed the incident on October 2, 2025, stating that around 70,000 users were affected worldwide.
