In the quiet between user support tickets and system logs lies delicate trust—and last month, that trust was rattled. On September 20, Discord’s customer-service platform was compromised, exposing critical user information that many believed safe behind support walls.
Discord says that an unauthorized party gained access to a third-party provider used by its Customer Support and Trust & Safety teams. The attackers did not breach Discord’s core systems. ([Discord][1])
The data exposed includes names, usernames, email addresses, IP addresses, and messages exchanged with support agents. In some cases, limited billing details (such as payment type and the last four digits of credit cards) were accessed. A small number of users who uploaded government ID images during age verification appeals also had those scanned documents exposed.
Discord asserts that full credit card numbers, CCV codes, passwords, or broader user activity (private messages, server chats) were *not* accessed.
Upon discovery, Discord revoked the third party’s access to its ticketing systems, launched an internal investigation, engaged forensic experts, and notified law enforcement. Impacted users are being contacted via email.
Sources
• Discord official announcement
• The Verge
• BleepingComputer
• Tom’s Hardware
Published by Banx Network. This article is part of the Banx decentralized media programme, powered by the BXE token on the XRP Ledger.
