How many users were affected by the Discord data breach?

The breach exposed identity documents from over 70,000 Discord users, all collected during the platform's age verification process.

What kind of data was exposed in the Discord breach?

Real identity documents: passports, driver's licenses, national ID cards. Data collected by Discord during the age verification process required by regulation.

How do you protect yourself after a breach that exposed identity documents?

Monitor your personal credit, check for any fraudulent account openings, report the document to the authorities if you fear misuse, and change your Discord password along with all connected services.

Did Discord notify the users affected by the data breach?

Discord stated it began notifying affected users as required by GDPR and US regulators. Affected users were supposed to receive direct communication.

Discord Data Breach — User ID Documents

Discord: 70,000 ID Documents Exposed

A data breach on Discord exposed over 70,000 users' identity documents. Passports, driver's licenses, national ID cards. Real data. Data collected during the age verification process.

How It Happened

Discord requires identity verification in certain circumstances: access to servers with sensitive content, account recovery, legal compliance in some jurisdictions. Users upload official documents. The documents get stored.

The breach exposed that storage. A database of identity documents became accessible to outsiders.

Who's at Risk

Anyone who completed identity verification on Discord in recent years. The exposed documents include full personal details, photos of the document, and in some cases selfie images matched to the document.

With this data, it's possible to build profiles for identity theft, opening fraudulent accounts, or targeted phishing attacks.

The Structural Problem

Identity verification has become a common compliance tool for platforms. But every verification system is also a database of sensitive data.

Discord isn't the only platform collecting documents. It's just the latest to face the public consequences.

Data retention is the critical point. How long are documents kept after verification? With what encryption? Who has access? These questions apply to every platform that requires ID.

What to Do If You're Affected

Change your password and enable two-factor authentication if you haven't already. Check your bank account activity. Report any suspicious activity to your bank.

If you uploaded a document, consider monitoring your credit profile for the next few months.

The Lesson

The data you give a platform exists for as long as the platform exists, and sometimes even after. Identity verification permanently increases the attack surface.

Before uploading a document to any platform, the question is: is it necessary? And if it is, what happens to that document afterward?