Discord Data Breach: 70,000 Users Affected

Discord Data Breach Impacts Approximately 70,000 Users

Discord revealed on Wednesday a security incident potentially affecting around 70,000 users. Sensitive data, including images of government-issued identification, may have been compromised following a breach at a third-party vendor.

Age-Related Appeals and Data Collection

Users typically submit an “age-related appeal” when Discord suspects potential underage activity or when identity verification is mandated for access based on their location. This process involves submitting a selfie alongside their government ID and Discord username to the Trust & Safety team.

Discord has notified impacted individuals, informing them that their IP addresses may also have been exposed. These addresses can be used to approximate a user’s geographic location.

Scope of the Breach: Conflicting Reports

Reports from 404 Media suggest the data breach could be more extensive than initially stated by Discord. Hackers allege the theft of 1.5 terabytes of data, potentially encompassing a significantly larger number of images than the reported 70,000.

However, a Discord spokesperson refuted these claims to The Verge, characterizing them as “incorrect” and attributing them to an extortion attempt.

Concerns Regarding Age Verification Practices

This incident highlights the anxieties voiced by digital rights advocates concerning the implementation of age checks as a method for enhancing online safety.

Growing Trend of Age Verification Laws

Age verification legislation, mandating the submission of sensitive personal information like government IDs, has been adopted in roughly half of the U.S. states. These laws primarily target websites featuring adult content.

As a result of these laws, Pornhub, a prominent adult video platform, has chosen to block access from these states rather than comply with the age verification requirements.

International Regulations: The U.K.'s Online Safety Act

The U.K.’s Online Safety Act, which came into force in July, expands age verification requirements to a wider array of platforms. This includes major services such as YouTube, Spotify, Google, X (formerly Twitter), and Reddit.

The Act necessitates these platforms to verify the ages of their users.