<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Discord incident updates</title>
  <link>https://pwn.watch/t/discord</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Thu, 09 Oct 2025 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/discord/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[high] Discord support vendor breach exposes ~70,000 government ID photos</title>
    <link>https://pwn.watch/i/discord-support-vendor-breach-id-photos-2025</link>
    <guid isPermaLink="true">https://pwn.watch/i/discord-support-vendor-breach-id-photos-2025</guid>
    <pubDate>Thu, 09 Oct 2025 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;An attacker got into a third-party customer-service system Discord used, exposing data of users who had contacted Support or Trust &amp;amp; Safety. About 70,000 users may have had government ID photos (from age-verification appeals) accessed. Discord named the vendor as 5CA, which denied its systems were hacked.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; no-fix-needed&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Latest updates:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;2025-10-09: Discord update: vendor named as 5CA; about 70,000 users may have had government-ID photos exposed (&lt;a href=&quot;https://www.discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service&quot;&gt;source&lt;/a&gt;)&lt;/li&gt;&lt;li&gt;2025-10-03: Discord discloses that a third-party customer service provider was compromised (&lt;a href=&quot;https://www.discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service&quot;&gt;source&lt;/a&gt;)&lt;/li&gt;&lt;/ul&gt;</description>
  </item>
</channel>
</rss>
