Discord Faces Extortion After Major Data Breach Exposes 2.1 Million Users’ ID Photos

Discord's customer support system was compromised on September 20, 2025, in a targeted attack that exposed sensitive personal documents of 2.1 million users. Hackers accessed driver's licenses, passports, and other verification materials submitted through the platform's Zendesk support system.

The breach extended beyond photos, compromising names, email addresses, Discord usernames, and support messages. Partial payment information—including the last four digits of credit card numbers—was also exposed. Full credit card details and passwords remained secure.

Security researchers indicate the attackers claim possession of 1.5 terabytes of stolen data. Discord delayed public disclosure for nearly two weeks, announcing the incident on October 3, 2025.

Unlike typical cyberattacks, this breach resulted from social engineering tactics targeting a third-party support provider rather than direct exploitation of Discord's Core systems.