152
Discord customer service data breach leaks user info and scanned photo IDs
(www.theverge.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 04 Oct 2025
152 points (98.7% liked)
Technology
76024 readers
367 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
Do people really have to scan an ID to us Discord?
No. According to an article the IDs were from people who were challenging an age determination. Still bullshit, but you don't need ID to use Discord as a general rule.
Small is, of course, a relative term. I would consider a small number to be 2 or 3. They may feel that 10,000 users is a small number. Who can say?
as a very minimum, it would make sense to demand safe-deleting the photo immediately after the verification process, with fucking prison time to someone if it is found they did not comply with that.
but that is clearly not the direction the society is going 🤷♂️
Apparently if they get flagged as underage when they aren't.
Yet another example of how requiring ID is a shit idea.
It's used by some Discord communities to prevent spam/bots. This would be inconjunction with other measures like how some communities require a verified email or to have a phone number associated with your account.
While those exist, those wouldn't have been affected by this breach (or if they were it was only incidentally) - those communities are not using Discord's age verification but are doing it through DMs (or a 3rd party service). Discord communities do not have access to age or ID verification tools, nor do they have the ability to impose restrictions based off age or ID verification (yet, there is rumored to be an age-verification access restriction beta going out, but it apparently doesnt use ID)