Discord reported a leak of user data and documents

Discord has reported a data leak of users who contacted customer support through a third-party service provider. The platform's press service made a corresponding statement on its website on October 3.

"We recently discovered an incident where an unauthorized party gained access to data through one of our third-party support service providers. This party gained access to information from a limited number of users who contacted Discord through our support services and the trust and security team," the message says.

According to Discord, the information that could have been compromised includes usernames, Discord nicknames, email addresses and other contact information, as well as limited payment information such as the type of payment and the last four digits of the credit card.

In addition, the leak affected user messages with support staff, as well as a small number of images of government documents (for example, driver's licenses and passports) from users who requested age verification. However, the company assured that among the leaked data, there are no complete bank card numbers and CVV codes, personal messages from users, passwords and account logins.

"Discord continues to take all necessary steps to respond to this situation. As part of standard procedures, we continue to regularly check our third—party systems for compliance with security and privacy requirements," the platform's press service reports.

Quit clicking: Major banks introduce new measures to combat fraud

How market participants are fighting the activity of intruders

On October 2, the Department for Combating the Illegal Use of Information and Communication Technologies of the Russian Interior Ministry warned about the risks of storing confidential information such as photographs of documents, passwords and bank notifications in phones. According to experts, scanned copies of documents such as passport, SNILS, INN, driver's license, and bank card information can be a real godsend for fraudsters who use them to access personal accounts, create fakes, or use social engineering.

All important news is on the Izvestia channel in the MAX messenger.