Discord Confirms Data Breach: User Information Exposed
Popular communication platform Discord has confirmed a security breach involving a third-party customer service system, which resulted in unauthorized access to user data. The company stated that the incident took place on September 20, 2025 (GMT) and affected users have been notified via email.
What Happened?
According to Discord’s statement, an unauthorized actor gained limited access to a customer support platform used by the company. The compromised data reportedly includes:
- Names, Discord usernames, email addresses, and other contact information
- Limited payment details such as payment method, the last four digits of credit cards, and purchase history
- IP addresses
- Messages and attachments shared with Discord’s Customer Support or Trust & Safety teams
Discord emphasized that the breach did not affect full credit card numbers, CVV codes, physical addresses, account passwords, or general messages exchanged on the platform.
How Discord Responded
Upon discovering the breach, Discord revoked the affected third-party provider’s access, launched an internal investigation, and engaged a leading cybersecurity firm to assist with forensic analysis and remediation.
Law enforcement agencies have also been notified of the incident.
The company said it is reviewing its security controls for all external service providers and will continue to conduct regular audits to ensure compliance with its internal security standards.
Advice for Users
Discord has urged users to remain cautious of suspicious emails or messages that may attempt to exploit the situation. Users with concerns can reach the support team via http://dis.gd/support.
“We take our responsibility to protect user data seriously and understand the concern this may cause,” the company stated in its official communication.
This attack targeting Discord’s customer support system has once again raised questions about third-party platform security and data protection practices across the gaming industry. The company confirmed that the investigation remains ongoing, with additional measures being taken to strengthen user safety moving forward.