Discord has confirmed a significant security breach of its third-party customer service platform.
That platform was Zendesk, according to security researchers, cited by Cyber Kendra.
The breach follows a spate of breaches across many competitive CRM and helpdesk systems, with social engineering still the most common means of poaching customer information. Yet, many other types of attack are emerging.
In a blog post divulging the attack, Discord shared more details. It noted:
The unauthorized party... gained access to information from a limited number of users who had contacted Discord through our Customer Support and/or Trust & Safety teams.
Discord also suggested the attackers were targeting their third-party customer support servers to "extort a financial ransom from Discord".
In an email to the affected users, Discord notified its users that personal information was released in the attack, including:
- Name, Discord username, email and other contact details if provided to Discord customer support
- Limited billing information such as payment type, the last four digits of your credit card, and purchase history if associated with your account
- IP addresses
- Messages with our customer service agents
- Limited corporate data (training materials, internal presentations)
A small number of government-issued ID images were also swept up in the process, increasing the danger of identity theft.
However, Discord has emphasized that data such as full credit card numbers or CCV codes, messages beyond discussions with customer support, or passwords were not involved in the cyberattacks.
Additionally, the company says it has notified the relevant data protection authorities and is proactively working with law enforcement to investigate the attacks, reviewing its threat detection and security systems, as well as continuing to audit its third-party systems.
Discord has also warned the affected users to be aware of any suspicious messages or communications, deploying more service agents to handle any additional support or queries.
