Data leak
Discord Third-Party Customer Service Provider Breach (55M Users)
Primary Source βIncident Details
In October 2025, Discord disclosed that an unnamed third-party customer service provider had been breached, exposing data for approximately 55 million Discord users. The exposed information included email addresses, usernames, user IDs, phone numbers, partial payment information, dates of birth, MFA configuration details, and government ID photos submitted for age verification purposes. Discord notified affected users and terminated the vendor relationship following the incident. This is one of the largest consumer platform breaches of 2025 by impacted user count.
Technical Details
- Initial Attack Vector
- Threat actor compromised an unnamed third-party customer service provider used by Discord, gaining access to customer support data including user account information
Timeline
- 2025-10-01 Breach occurred
- 2025-10-15 Publicly disclosed
- 2025-10-15 Customers notified