70,000 government IDs were exposed in a Discord breach - could yours be next?

Follow ZDNET: Add us as a preferred source on Google. Discord has revealed the theft of around 70,000 government-issued ID photos in a recent data breach. The platform was targeted by cybercriminals who compromised one of Discord's third-party vendors. The vendor in question provided customer support services, including age verification, which requires a photo ID displaying the user's date of birth -- a mechanism launched in response to new age verification laws imposed in the UK, which is being followed in the EU, Australia, and some US states. Also: Hackers stole 1 billion records from Salesforce customer databases with this simple trick - don't fall for it The company said the cyberattack's overall aim was to use the stolen data as leverage to secure a "financial ransom." In a security advisory, Discord was keen to emphasize that the data breach didn't occur at Discord -- a messaging platform popular with gamers that has amassed approximately 200 million users worldwide -- but instead through the third-party. Information provided by users to customer support may have included names, Discord usernames, email addresses, contact details, limited billing information, purchase histories, messages between users and customer service reps, and government-issued ID photos. Full credit card numbers, card CCV codes, and authentication data (such as passwords) were not involved in the breach. Discord has not revealed the exact number of users embroiled in the data breach, beyond sayin...