Discord Data Breach: ID Images Exposed
In October 2025 Discord said government ID photos used for age checks may have been exposed through a third-party vendor. A government ID cannot be reset like a password.
By Siddharth ShankarUpdated October 19, 2026Discord said around 70,000 users may have had government ID photos, such as passports and driver’s licences used for age checks, exposed after a third-party vendor used to review age-related appeals was breached. Hackers claimed far larger numbers, which Discord disputed. Unlike a password, an ID cannot be changed, so freeze your credit, watch for impersonation and be careful with messages pretending to be Discord.
Your email may already be in a known data breach. Find out in about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
Discord is a chat service used by millions of people, including many younger users. In 2025 it disclosed a breach that involved the one kind of data you cannot easily replace: photos of identity documents.
What Discord confirmed
In a disclosure update dated 8 October 2025, reported by Cyber Daily, Discord said that approximately 70,000 users may have had government ID photos exposed. The photos were passports and driver’s licences that users had provided for age assurance. Discord said the problem came from its vendor used to review age-related appeals. The vendor was not named in Discord’s statement.
What the hackers claimed
The attackers made much larger claims. Reports said they claimed 1.6 TB of data from a support ticketing system, including about 8.4 million tickets affecting 5.5 million unique users, and around 580,000 users with some payment information. Discord has not confirmed these numbers and called the figures reported by one researcher incorrect. Treat claims by criminals as unproven, but do not ignore them either.
Which data is at risk
- Confirmed by Discord: government ID photos for about 70,000 users.
- Claimed by attackers, not confirmed: support ticket content, attachments and some payment information.
The Cyber Daily article does not give a Discord statement about passwords or payment data, so check any notice you receive for exactly what applies to you.
Do not guess. See which breaches include your email and what leaked.
Free · About 30 seconds · No sign-up · Email not stored
Why ID photos are different
You can change a password in a minute. You cannot change your date of birth, your name or your passport number easily. A photo of your ID can be used to try to open accounts, pass identity checks or build a fake identity. See how passport photo swaps are used in loan fraud for how stolen documents are abused.
What to do if you might be affected
1Read any notice from Discord
Use the official app or website, not links in unexpected emails.
2Freeze your credit
In the US, a credit freeze is free and blocks new accounts. Elsewhere, ask your credit agencies about similar protection.
3Watch for impersonation
Be alert to accounts, loans or services opened in your name. See warning signs of identity theft.
4Replace the document if you have real concern
Passport and licence authorities have processes for lost or compromised documents. Contact them if you have evidence of misuse.
5Be wary of fake Discord messages
Breaches create phishing. See how to tell if a breach notice is real.
Questions to ask before you upload an ID
- Why does the service need it, and is there another way to prove my age?
- How long will it keep my ID?
- Does a third-party company handle the review?
- Can I delete the image afterwards?
If your ID is misused
If you see accounts or loans you did not open, report it. In the US, IdentityTheft.gov creates a recovery plan, and see what to do if your identity is stolen for the steps in other countries. Tell the issuing authority, such as the passport or licence office, if you believe your document is being used.
For parents
Age checks are becoming more common, and younger users may be asked to upload an ID. Talk to them about when this is safe, and show them how to use the official app or website instead of links sent in messages.
Check your wider exposure
Run the free check on this page to see which breaches include your email. For the full picture of breach types, see what each type of breached data means.
Sources
- Cyber Daily: Discord updates breach disclosure, government IDs of tens of thousands compromised (October 8 2025 update, about 70,000 users, vendor for age-related appeals, attacker claims)
Frequently asked questions
How many Discord users had ID photos exposed?
Discord said approximately 70,000 users may have had government ID photos exposed.
How did the Discord breach happen?
Discord said it came through a third-party vendor used to review age-related appeals.
Were passwords and payment details leaked?
The reporting does not include a Discord statement on this. Attackers claimed some payment information was exposed, but Discord has not confirmed it.
Are the hackers’ larger numbers true?
Discord called one researcher’s figures incorrect and has not confirmed the attackers’ claims.
What should I do if my ID photo may have been exposed?
Freeze your credit, watch for impersonation, ignore unexpected messages about the breach and contact the issuing authority if you see misuse.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Change reused and leaked passwords
NordPass flags weak and reused passwords, and its Premium plan alerts you if your details appear in new breaches.
See NordPass →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.