Discord, Inc. Under Investigation for Data Breach of At Least 70,000 User Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of at least 70,000 users of Discord, Inc. (“Discord”), a California-based technology company that provides a free, voice, video, and text communication platform for communities and groups.

On September 30, 2025, an unauthorized third party gained access to 5CA, one of Discord’s third-party customer service providers. The unauthorized party gained access to information from a limited number of users who had contacted Discord through its Customer Support and/or Trust & Safety teams.

Ransomware group Scattered Lapsus$ Hunters claims to have exfiltrated 1.5 terabytes of sensitive information, including over 2.1 million government-issued identification photos. However, Discord denies these claims and has identified approximately 70,000 users whose government identification photos were exposed. Discord notified impacted users on or around October 3, 2025. 

The following information may have been compromised in the breach: names, Discord usernames, email addresses, other contact details if provided to Discord customer support, limited billing information such as payment type, the last four digits of credit cards, any purchase history associated with the compromised Discord accounts, IP addresses, messages with customer service agents, limited corporate data (training materials, internal presentations), and government identification photos.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Discord’s cybersecurity practices.

If you received notification of this data breach or are a Discord user and wish to obtain additional information about your legal rights, please fill out the form below.