Discord Inc.

Discord Inc. disclosed that a third party obtained unauthorized access to its customer service platform via a compromised vendor device between September 20-22, 2025. The incident was discovered on September 25, 2025. Affected data includes names, contact info, dates of birth, government IDs, limited payment info, IP addresses, and support messages. Discord revoked vendor access, engaged forensics, notified law enforcement, and offered 12 months of credit monitoring.

Discord Inc. notified Vermont residents of a data incident where a third party accessed the customer service platform via a compromised vendor device between Sept 20-22, 2025. Data accessed included names, contact info, usernames, DOB, government IDs, limited payment info, and messages. Discord engaged forensic investigators, revoked vendor access, and offered 12 months of credit monitoring.

Discord Inc. based in San Francisco, California, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-09-25 and reported on 2025-12-05. 1,465 Texas residents were affected. 74,729 individuals affected in total. Types of information involved: Name of individual;Address;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Date of Birth. Consumers were notified via U.S. Mail;Email.

Discord Inc. notified the New Hampshire Attorney General of a data incident involving unauthorized access to customer support systems via a compromised vendor device. The breach affected approximately 39 New Hampshire residents, exposing personal information including names, contact details, government IDs, and limited payment data. Discord engaged forensic investigators, revoked vendor access, and offered 12 months of credit monitoring.

Discord Inc. disclosed that a third party obtained unauthorized access to its customer service platform via a compromised vendor device between September 20-22, 2025. The incident was discovered on September 25, 2025. Affected data includes names, contact info, usernames, dates of birth, government ID photos, limited payment info, IP addresses, and support messages. Discord revoked vendor access, engaged forensics, notified law enforcement, and offered 12 months of credit monitoring.

Discord Inc. disclosed a data incident in a Montana consumer notification letter. Unauthorized access to the customer service platform occurred between September 20-22, 2025, via a compromised vendor device. Discord discovered the breach on September 25, 2025, and notified law enforcement and affected individuals. Data accessed included names, contact info, usernames, DOB, government IDs, and limited payment data.

Discord Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-20 and was reported on 2025-11-24. 225 Indiana residents were affected. 74,729 individuals affected in total.

DISCORD INC. filed a data-breach notice with the Illinois Attorney General in November 2025 (case 25-11-611). The register records the breach as discovered on September 25, 2025. Personal information types reported: drivers license, passport number. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Discord Inc. reported a data breach that occurred on March 29, 2023, and was discovered on June 13, 2023. An external hacking incident resulted in the compromise of names and driver's license or non-driver identification card numbers for 180 individuals, including one resident of Maine. Affected individuals were notified on August 21, 2023, and offered one year of credit monitoring and identity theft protection services through IDX.

Discord Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-29 and was reported on 2023-08-21. 4 Indiana residents were affected. 180 individuals affected in total.

Discord, Inc. notified the New Hampshire Attorney General of a security incident involving one NH resident. On March 29, 2023, an unauthorized person gained access to a third-party service provider's account using valid credentials. The attacker accessed support tickets containing a New Hampshire resident's driver's license or state ID image. Discord deactivated the account, investigated, and mailed notification on August 21, 2023, offering one year of credit monitoring.

Discord Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-21. 6 Massachusetts residents were affected. The report records the breach type as electronic.

The CNIL (France) issued a investigation regarding Discord. A fine of EUR 800,000 was imposed. Outcome: Violation Found. GDPR articles: Article 3(2)(a) GDPR, Article 5(1)(e) GDPR, Article 12 GDPR, Article 13 GDPR, Article 13(2)(a) GDPR, Article 21 GDPR, Article 25(2) GDPR, Article 32 GDPR, Article 35(1) GDPR, Article 55(1) GDPR, Article 56 GDPR.