Discord Data Breach Reveals Risks of Online Age Verification Systems

Discord, a popular messaging platform among gamers and teenagers, has revealed that official ID photos of about 70,000 users were stolen by hackers. The breach happened through a third-party firm responsible for verifying user ages, not Discord’s own platform. The stolen data potentially includes personal information, partial credit card numbers, and customer service messages, but no full credit cards, passwords, or private chat data were compromised. This incident highlights the risks involved as companies are increasingly required by governments to implement age verification online, similar to checking IDs for buying alcohol offline. Unlike physical stores, online platforms often store sensitive documents, creating security vulnerabilities. Although Discord’s automatic age verification system was not hacked, the appeals process—where users submit ID photos to prove their age—was compromised. Hackers claim to have over 2 million photos, but Discord states the actual number is closer to 70,000 and accuses hackers of trying to extort money. The event raises questions about the balance between internet policing and user security, and suggests that collecting less personal data could be the safest approach to protecting user privacy.