A recent Discord data breach has exposed over 2.5TB of private data, including IDs!
Following age verification under UK law, third-party users have hacked the platform.
But how many people were affected, and is my driving license now on the dark web?
Discord Data Breach
Firstly, the Discord data breach itself occurred on September 20th, 2025, even though you may have received an email just this October 3rd. Although this is forced entry from a third party, it was not into Discord directly.
Instead, this was a breach of a third-party customer service system used for verification. Actually, it’s the Discord support portal itself, powered by Zendesk.
Although it’s easy to blame the Discord data breach on the ID verification system, it’s more complicated. Because that system alone was not penetrated. However, some users going through those steps for verification may very well have their data leaked.
Because if you opted to input the data manually, you would have been taken to the support portal. Of course, this being where the main penetration occurred means your data may have been nabbed.
But the info at risk here is your name, username, email, contact and other inputted details from the page. Also limited payment details as well as type, 4 digits and purchase history.
Of course your IP address and messages sent to the customer team are also on the list. However, the important thing to note from this Discord Data Breach is this line right here. Because attachments also include government ID images, being ID photos and passports!
Although they state that if this were the case, the email would detail it; however, these have been proven to be incorrect in some cases. Some users who got the email had some details mentioned to be not breached; however, upon reviewing the sent ticket, it most certainly contained those details!
Thank You, Age Verification
In summary, if you tried verifying your age, then yes, your ID details may have been targeted. Although the Discord Data Breach email sent to you says otherwise, please double-check your customer portal ticket details for clarification.
Also, this goes for anyone using the portal for, say, a DMCA or complaint; then you may have got… got. Overall this whole ordeal is pretty bad; however, it does highlight something important. The data that governments are demanding you hand out for protection are not as equally protected.
Arguably, more UK residents were put at risk because of the mandate from such an ordeal. But this is just the first of a potential list of many to come. I’m sure that dodgey site you go to will keep all your information safe!
Please think of the children though… As in the poor kids that got their details exposed because of such mandates. Overall, what I want to get across is if you even think you have been breached, please do your research.
And let this Discord data breach be an example of why you should maybe hold off on giving everyone and anyone your government details! I know you want to post some spicy stuff in NSFW, but just maybe hold off for a bit!
