Discord accepted the leak. No password dropped. 🚨

Discord confirmed that some user data was leaked on September 20, but it was clear that its passwords, main account data, and server chat were still 100% secure. This incident was not directly hacked by Discord's own system, but by an "external customer support provider" used by the company. It was reported that a hacker group called Scattered Lapsus $Hunters (SLH) claimed to be behind the attack and also tried to ransom the company.

.

The information accessed contains only the real name, email, IP address, and some payment information, such as the type of payment with the last four credit card digits, as well as messages that the user used to contact customer service, but no password or important personal information has been dropped. Some users who have sent identity documents, such as ID cards, driver's licenses, or passports, to appeal for age confirmation may also be affected, but Discord confirms that there are not many and will receive direct email from the company.

.

After the incident, Discord immediately shut down the hacked carrier's access, notified cybersecurity officials to investigate it, and began a joint investigation with security experts, while upgrading the Threat Detection System to prevent this from happening in the future.

.

Discord reiterated that contacting affected users will only be made through official email noreply@discord.com and that no direct contact phone calls will be made, warning users to beware of strange emails or messages that may be crooks impersonating the company's name.

.

Although Discord's core systems are not affected, this event is another important lesson that underscores how good the security system is, and if someone works with us, there may be loopholes from others. No matter how secure the core system is, if an external partner or provider is vulnerable, the entire system can be penetrated.

.

Source: techspot

# IT should know # IT News # Includes IT matters # IT