Discord data breach: User emails and support messages exposed
Discord, the popular chat app, has alerted its users about a data breach that occurred after the account of a third-party support agent was compromised. The support agent's account exposed the agent's support ticket queue, which contained user email addresses, messages exchanged with Discord support, and any attachments sent as part of the tickets.
Discord has informed its users that it immediately addressed the breached support account by disabling it once the incident was discovered. The company has also completed malware checks on the affected machine. However, the nature of the incident makes it possible that user email addresses, the contents of customer service messages, and any attachments sent between users and Discord may have been exposed to a third party.
In letters sent to affected users, Discord said, “Due to the nature of the incident, it is possible that your email address, the contents of customer service messages and any attachments sent between you and Discord may have been exposed to a third party. […] As soon as Discord was made aware of the issue, we deactivated the compromised account and completed malware checks on the affected machine.”
This is not the first time Discord has experienced a data breach, but Discord has assured its users that it will continue to work to improve its security measures to prevent such incidents from happening in the future.