ClosedHighNo fix needed

Discord support vendor breach exposes ~70,000 government ID photos

Discord customer support (third-party vendor / ticketing)

An attacker got into a third-party customer-service system Discord used, exposing data of users who had contacted Support or Trust & Safety. About 70,000 users may have had government ID photos (from age-verification appeals) accessed. Discord named the vendor as 5CA, which denied its systems were hacked.

Why this severity: Third-party breach exposing government ID images

Started: Oct 3, 2025
Closed: Oct 9, 2025

Follow this incident

Updated Oct 9, 2025

Affected

Fixed in

No fixed release yet

Timeline2

Oct 9, 2025
Discord update: vendor named as 5CA; about 70,000 users may have had government-ID photos exposed
Source
Oct 3, 2025
Discord discloses that a third-party customer service provider was compromised
Source

Advisories1

Update on a Security Incident Involving Third-Party Customer ServiceDiscord

News & write-ups3

Notes & caveats

Dates from Discord's statement (posted 2025-10-03, updated 2025-10-09). The 5.5M figure is the attackers' claim; 5CA disputes being hacked.

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Get notified