Discord sends data breach notices to users affected by the March hack

Since August 21, the instant messaging and VoIP social platform, Discord, has begun notifying individuals affected by the hack of a support agent’s account on March 29.

While the initial statement did not reveal the extent of the breach or say whether it exposed sensitive personally identifiable information of users, it seems that Discord has now finished its investigation.

According to a letter to the Office of Maine's Attorney General, only 180 Maine residents were impacted by the data breach.

Data compromised during the account takeover attack of a Discord support agent’s account (the company uses a third-party service provider to address certain user requests) has unfortunately exposed images of user drivers’ licenses or state identification cards.

“Discord learned that an unauthorized person gained access to the account of an agent of that service provider on March 29, 2023, and accessed some of the agent’s support tickets,” the data breach notice reads. "On June 13, 2023, Discord completed the review of the support tickets involved and determined that one or more of those support tickets contained the personal information of one Maine resident including the individual's name and driver's license or state identification card number."

Users who’ve received the notice can enroll for free credit monitoring and identity theft protection services offered by the company.

However, Discord urges victims to remain vigilant and scrutinize suspicious messages that may put them at risk of further compromise. Although no signs of data misuse have been reported so far, Discord users should always exercise caution when interacting with others on the platform and never share sensitive information (passwords, financial info or credit card numbers).

Want to stay on top of data breaches and leaks that can harm you financially?

Use Bitdefender Digital Identity Protection to continuously monitor the extent of the digital you and track down any data leaks that involve your personally identifiable information.

Read more about our privacy and identity protection services here.