The recent Discord data breach involving government issued IDs has turned out to be far more severe than initially reported. What began as a limited security incident has now been confirmed to affect over 70,000 users, exposing sensitive identity documents such as passports, driver’s licenses, and national ID cards submitted during Discord’s verification process.
The breach reportedly originated from a third-party service provider responsible for handling identity verification for Discord’s Trust and Safety team. Attackers were able to access stored verification files, which included both images and metadata tied to user accounts. These records are now circulating in dark web communities, raising fears of identity theft, fraud, and account takeovers.
Sources say 1.5 TB of data and over 2 million government ID photos were compromised.
More insights from the team
Continue exploring adjacent research and threat briefings selected for their relevance to this topic.