Popular VoIP and social messaging company Discord has announced a data breach and is alerting the affected users.
The security compromise caused unauthorized entry into a third-party customer care agent's support ticket queue.
The support ticket queue contained user email addresses, messages, and related attachments exchanged with Discord support.
The business quickly deleted the hacked account and investigated the affected computer to see if the malware had been installed.
Discord also disclosed that it had collaborated with its customer support partner to strengthen its cybersecurity posture and avoid repeating the same mistakes.
Source: https://securityaffairs.com/146171/data-breach/discord-suffered-data-breach.html
TPRM report: https://scoringcyber.rankiteo.com/company/discord
"id": "dis222028523",
"linkid": "discord",
"type": "Data Leak",
"date": "05/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'VoIP and Social Messaging',
'name': 'Discord',
'type': 'Organization'}],
'attack_vector': "Third-party customer care agent's support ticket queue",
'data_breach': {'type_of_data_compromised': ['User email addresses',
'Messages',
'Related attachments']},
'description': "Unauthorized entry into a third-party customer care agent's "
'support ticket queue, compromising user email addresses, '
'messages, and related attachments.',
'impact': {'data_compromised': ['User email addresses',
'Messages',
'Related attachments']},
'response': {'containment_measures': ['Deleted the hacked account',
'Investigated the affected computer for '
'malware'],
'remediation_measures': ['Strengthened cybersecurity posture'],
'third_party_assistance': ['Collaborated with customer support '
'partner']},
'title': 'Data Breach at Discord',
'type': 'Data Breach'}