As reported by The Verge, Discord disclosed a breach involving a third-party customer service provider. An unauthorized entity managed to access this service, purportedly seeking to extort a financial ransom.

While the hackers did not breach Discord’s systems directly, user data linked to Discord’s Customer Support and Trust & Safety teams was affected. This included sensitive information required for age verification, such as government IDs.

Potentially compromised data encompasses names, Discord usernames, email addresses, last four digits of credit card numbers, and more. Discord has assured that anyone impacted will be contacted via email. The platform has also cut off the involved customer support partner’s access to its systems.

This incident highlights the vulnerabilities tied to age verification practices, especially with new laws like the UK’s Online Safety Act mandating such measures. Users are reminded to remain vigilant and watch for communications regarding their data.