DisclosureLens
UnknownFinancial accountIdentity (basic)CredentialsAuthenticationPCIMedium

5CA (a third-party service provider for Discord)

bd_5c1f70022f9be3c8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 3, 2025

To disclose

—

Affected

70,000scope not determined

Confidence

95%
Full breach record for 5CA (a third-party service provider for Discord) →

5CA (a third-party service provider for Discord) reported a data breach to the Wisconsin DATCP. The public was notified on 2025-10-03. The incident occurred on September 20, 2025. Data accessed: Name; Discord username; email and other contact details if provided to Discord customer support; Limited billing information such as payment type, the last four digits of your credit card, and purchase history if associated with your account; IP addresses; Messages with Discord customer service agents; Limited corporate data (training materials, internal presentations). The unauthorized party also gained access to a small number of government ID images. 70,000 individuals were affected.

Incident timeline

Sep 20, 2025

Begins

Oct 3, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed70,000 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.