VoIP and instant messaging social platform Discord is notifying users that some of their information was compromised in a cybersecurity incident at a third-party services provider.
Late last week, the company informed users that a “third-party customer service agent’s support ticket queue” was accessed without authorization, resulting in user email addresses, contents of customer service messages, and attachments being compromised.
Although no specific details were provided, Discord’s notification suggests that a threat actor gained access to credentials for the third-party provider’s account.
“As soon as Discord was made aware of the issue, we deactivated the compromised account and completed malware checks on the affected machine,” the company said in the incident notification, copies of which have been shared online by the impacted individuals.
Discord also notes that it worked together with the affected third-party provider to “improve their practices” and help prevent similar attacks from happening.
It is unclear how many individuals that had submitted support tickets may have been impacted by the data breach. Discord says it has over 150 million monthly active users.
The company did not say which provider was compromised, but some users suggest it might have been Zendesk, which Discord is known to use for managing support tickets.
SecurityWeek has emailed Discord for clarifications on the incident and will update this article as soon as a reply arrives.
Related: NBA Notifying Individuals of Data Breach at Mailing Services Provider
Related: 500k Impacted by Data Breach at Debt Buyer NCB
Related: 14 Million Records Stolen in Data Breach at Latitude Financial Services
More from Ionut Arghire
- Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer
- US, South Korea Detail North Korea’s Social Engineering Techniques
- High-Severity Vulnerabilities Patched in Splunk Enterprise
- Enzo Biochem Ransomware Attack Exposes Information of 2.5M Individuals
- Google Temporarily Offering $180,000 for Full Chain Chrome Exploit
- Toyota Discloses New Data Breach Involving Vehicle, Customer Information
- Adobe Inviting Researchers to Private Bug Bounty Program
- Critical Vulnerabilities Found in Faronics Education Software
Latest News
- Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech
- In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack
- OpenAI Unveils Million-Dollar Cybersecurity Grant Program
- Galvanick Banks $10 Million for Industrial XDR Technology
- Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer
- US, South Korea Detail North Korea’s Social Engineering Techniques
- High-Severity Vulnerabilities Patched in Splunk Enterprise
- Idaho Hospitals Working to Resume Full Operations After Cyberattack
