Discord Data Breach Notice Raises Validity Concerns
A data breach notice filed with the Maine Attorney General’s office on June 8, 2026, names Discord Inc. as the affected company, claiming over 10 million individuals were impacted by "insider wrongdoing." However, multiple inconsistencies in the filing have raised doubts about its authenticity.
The notice, submitted by an individual identified as a "Data Subject / Reporter" using a personal Gmail address and a placeholder phone number, differs from previous filings where Discord was represented by the law firm BakerHostetler. Key details are also missing, including the type of compromised data and an unusual consumer notification date of January 1, 2000. The reported breach timeline occurring on July 9, 2024, with discovery on August 2, 2025 further complicates the filing’s credibility.
Discord’s most recent confirmed incident involved a third-party vendor breach in October 2025, where hackers stole government ID photos and private data from approximately 70,000 users. No official confirmation from Discord or regulators has been issued regarding the newly reported breach.
Source: https://www.scworld.com/brief/discord-data-breach-claim-filed-with-maine-ag-raises-red-flags
Discord Inc. TPRM report: https://www.rankiteo.com/company/discord
"id": "dis1781051097",
"linkid": "discord",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Over 10 million (alleged)',
'industry': 'Technology',
'name': 'Discord Inc.',
'type': 'Company'}],
'attack_vector': 'Insider Wrongdoing',
'data_breach': {'number_of_records_exposed': 'Over 10 million (alleged)'},
'date_detected': '2025-08-02',
'date_publicly_disclosed': '2026-06-08',
'description': 'A data breach notice filed with the Maine Attorney General’s '
'office on June 8, 2026, names Discord Inc. as the affected '
'company, claiming over 10 million individuals were impacted '
"by 'insider wrongdoing.' The notice's authenticity is in "
'question due to inconsistencies, including a personal Gmail '
'address, placeholder phone number, missing details, and an '
'unusual notification date of January 1, 2000. Discord’s last '
'confirmed incident involved a third-party vendor breach in '
'October 2025.',
'impact': {'data_compromised': 'Over 10 million individuals allegedly '
'impacted'},
'investigation_status': 'Unconfirmed',
'references': [{'source': 'Maine Attorney General’s office'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed with Maine '
'Attorney General’s '
'office'},
'title': 'Discord Data Breach Notice Raises Validity Concerns',
'type': 'Data Breach'}