Discord Alerts Users Impacted by March Data Breach: Report
Popular chat platform Discord has begun notifying users affected by the March data breach, roughly three months after the company announced the attack in May.
According to a security breach notification filed with the US Attorney General of Maine, only 180 of Discord’s 150 million monthly users exposed sensitive information in the attack.
That means Discord users are more likely to be affected by the Discord.io breach, which affected 7,60,000 users earlier this month and eventually led to the site’s shutdown, ReturnByte reported.
Discord.io allows Discord users to create custom links for their channels.
On August 14, a major data breach caused by a vulnerability in the website’s code allowed a third-party attacker to steal data and sell it on a forum for breached data, including hashed passwords, billing information, and Discord credentials.
“We have decided to take down our site for the time being,” Discord.io wrote in a post.
As part of its efforts to mitigate data breaches and prevent future problems, the company is planning “a complete rewrite of our website code and a complete overhaul of our security policies.”
According to the report, this is not the same as the Discord breach that the company may have notified you about this week.
A separate incident involving Discord and not the separate Discord.io entity occurred earlier this year when an unauthorized user accessed Discord data through a third-party service provider.
The hacker stole personal information, such as driver’s license numbers, from 180 users’ service tickets.
To prevent further damage, Discord will contact users via email and provide credit monitoring and identity theft protection services.
Meanwhile, Discord has laid off about 37 employees, representing 4 percent of its total workforce.
According to a report by The Information magazine, the layoffs were mainly in the marketing, talent and public policy teams
