Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Discord Informs Users of Data Breach Involving Customer Support Provider

Communications and social platform Discord is notifying users of a cyber incident involving a third-party services provider.

VoIP and instant messaging social platform Discord is notifying users that some of their information was compromised in a cybersecurity incident at a third-party services provider.

Late last week, the company informed users that a “third-party customer service agent’s support ticket queue” was accessed without authorization, resulting in user email addresses, contents of customer service messages, and attachments being compromised.

Although no specific details were provided, Discord’s notification suggests that a threat actor gained access to credentials for the third-party provider’s account.

“As soon as Discord was made aware of the issue, we deactivated the compromised account and completed malware checks on the affected machine,” the company said in the incident notification, copies of which have been shared online by the impacted individuals.

Discord also notes that it worked together with the affected third-party provider to “improve their practices” and help prevent similar attacks from happening.

It is unclear how many individuals that had submitted support tickets may have been impacted by the data breach. Discord says it has over 150 million monthly active users.

The company did not say which provider was compromised, but some users suggest it might have been Zendesk, which Discord is known to use for managing support tickets.

SecurityWeek has emailed Discord for clarifications on the incident and will update this article as soon as a reply arrives.

Advertisement. Scroll to continue reading.

Related: NBA Notifying Individuals of Data Breach at Mailing Services Provider

Related: 500k Impacted by Data Breach at Debt Buyer NCB

Related: 14 Million Records Stolen in Data Breach at Latitude Financial Services

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

Certificate lifecycle management firm Sectigo has hired Jason Scott as its CISO.

The State of Vermont has appointed John Toney as the state’s new CISO.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.