Discord, a widely used messaging platform, suffered a data breach in 2025 after a third-party customer service provider it relied on was hacked. The incident resulted in the unauthorized exposure of user data, with the compromised information carrying serious potential consequences. While the exact scope of the leaked data (e.g., personal details, account credentials, or communication logs) was not specified, the breach underscores the risks posed by supply-chain vulnerabilities where even robust internal security measures can be undermined by external partners. The incident highlights how cybercriminals increasingly target third-party vendors as entry points to access larger organizations. Users were notified of the breach, though the long-term repercussions such as identity theft, phishing attacks, or reputational damage to Discord remain uncertain. The breach reinforces the need for stricter vendor security assessments and proactive monitoring of external dependencies in an era where digital supply-chain attacks are escalating.
Source: https://tech.co/news/discord-hackers-accessed-user-data
TPRM report: https://www.rankiteo.com/company/discord
"id": "dis5202452100825",
"linkid": "discord",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'technology (messaging platform)',
'name': 'Discord',
'type': 'company'}],
'customer_advisories': ['users notified of the breach and potential '
'consequences'],
'data_breach': {'data_exfiltration': True,
'sensitivity_of_data': ['potentially serious consequences'],
'type_of_data_compromised': ['user data']},
'description': 'Discord users were notified that a hack last month '
'compromised a third-party customer service platform used by '
'the company, leading to the leakage of user data with '
'potentially serious consequences. The breach highlights the '
'risks posed by vulnerabilities in external services relied '
'upon for business operations.',
'impact': {'brand_reputation_impact': True,
'data_compromised': True,
'identity_theft_risk': True,
'systems_affected': ['third-party customer service platform']},
'post_incident_analysis': {'root_causes': ['third-party service '
'vulnerability']},
'response': {'communication_strategy': ['user notifications']},
'title': 'Discord Third-Party Customer Service Platform Data Breach',
'type': ['data breach', 'third-party breach']}