ID photos of 70,000 users may have been leaked, Discord says (2025)
The platform says hackers targeted a firm that helped to verify the ages of its users.
From 2025.
https://www.bbc.com/news/articles/c8jmzd972leoOpen linkView original on piefed.social
85 replies
This is old news. It didn't happen a second time.
First ive heard of it.
Also not trying to be rude but is this Technology or Technology news? Like I keep seeing people post things but if there not like the newest tech, they get downvoted. Im not saying thats incorrect but Id like to know in case I post what the distinction is.
"Tech news and articles".
Since this is purely a news article, it's of little value a year later, when a more up-to-date article about verification would have more current information.
If it was about how some part of the tech stack worked ("article") and things hadn't changed that much, an older article would probably fare better.
Ah gotcha! Thanks. I dont know why I didnt make that connection then.
You should put the year clearly in the title of the post
Its there about a few hours into the post. Might take a bit to propagate all round the fedi.
Either way it's important to convey that this article is old and it didn't happen a second time.
This makes it sound current.
News are new.
So yes, that response is expectable.
It's funny how few people realize that etymology.
At some point tech turned into a catch all for big app companies, instead of gadgets and the like...
What's the difference?
Probably just because the vast majority of modern tech news is horrendous and exploitative. Something the users of this platform are attuned to.
In my opinion, no, Technology is "the application of scientific knowledge to the practical aims of human life". A data breach is not an application of scientific knowledge in any way.
Yeah, they've changed. This time they'll keep the data safe, for realsies, pinky promise. Im sure they even gave their employees a stern talking to!
Discord announced that it's going to start estimating user ages and using a third-party group to do so, so there is some relevance to it.
We told you this would happen. We told you this would be the result of "age verification". As usual, you fucking didn't listen.
I hope Discord is sued into receivership over this.
Something tells me they will not face any consequences.
that's just a feeling, right? there's no prior experience that could trigger that, right? *nudge, nudge. wink, wink.*
Anyway, miraculously i haven't been hit with the age-wall yet, bur when i do, Discord will lose a user.
I checked and both of my accounts are considered adult apparently, so hopefully they won't change that in the future for me and that will be the end of that for me.
Yeah, it's a shame this didn't come 1-2 years earlier before discord got its claws in more stuff. Discord really caught on in my corners of the internet in the last 2 years. Before that, it was just my Minecraft pals. Even creators who freed themselves from the advertising machine by going fan-funded on Patron style sites still use discord to communicate. I hate to see them hit by boycott action against Discord, but if you stand on an archery range, don't be surprised when you have a bunch of arrows sticking out of your noggin. ¯\(ツ)/¯
Nothing came of this.
Or ever will.
Discord isn't the one that got hacked and leaked the info, it's whatever 3rd party they used.
Discord vetted and chose that vendor. They are liable, and as a corporate person, their corporate charter should be revoked until it has served 70,000 sentences of accessory to identity theft.
Unless we are a nation of cowards and weaklings of course. So who are we?
💯, absolutely agree. 3rd party or not it's completely irrelevant. That personal info is out in the wild and that is the point.
Who the hell cares?
This article is dated "9 October 2025" which would make it almost a year old.
Yeah, dates in submission links would be great. Wonder if it can be automated so when I submit a URL, lemmy fetches the creation date while it's fetching the headline.
If the site metadata is made to contain fhe date then yeah, but otherwise I don't think theres a way to get the date of the html file from its url...?
If not, then there isn't any standardized publication date format which allows us to automate retrieval.
A lot of them use this in the HTML:
I’ve scripted a fair bit of scraping in the past just by looking for those kinds of entries. But only focussed on a few dozen websites so I can’t say how common it is.
If the fetching function can validate the data it should be able to continue without a date if needed.
IT would be neat to auto-add yeah.
I thought that they were deleting the photos immediately after verification. They didn't??? Why aren't these companies being investigated and punished?
Because money. We'll soon have to take things into our own hands, as the establishment only protects itself, and not us plebs.
This is from the leak last year. What leaked was pictures uploaded to their ticket system to appeal the result of a failed verification.
...so you are saying their verification process is so broken that hundreds of thousands of people had to appeal a false reading. Broken and insecure, what a look.
It depends on the ratio of failed to successful, really. If there are hundreds of millions of successful verifications, that's a fairly low failure rate.
Why? For example, XING just got sold and with it all personal information. This is why they didn't.
It would be a clear gdpr violation in Europe
I'm glad you added from 2025 there because otherwise it would have been super deceptive.
I definitely thought it happened again, and I was gonna be like, well that was fast. Like we all know it's going to happen again, but that would have been extremely fast.
It's still deceptive. The title should indicate that.
This article is a year old, but relevant because Discord started doing the verifications again. The plan was never canceled, just delayed to a later news cycle. And this will absolutely happen again because there are no consequences.
Who could've seen that coming?
Certainly not anyone who objected to the practice.
Here is a more recent ID verification service breach.
https://www.techtimes.com/articles/326418/20260903/idscannet-breach-exposes-153-million-licenses-infrared-scans-that-pass-bank-checks.htm
Wao, again? The reasons why people keep using these bullshit services really make my mind spin. This is no different than people choosing to stay in a relationship with an abusing partner.
Edit: I just saw this is from last year's leak. Still, the likeness remains.
I say that about Windows users who jump through hoops to try to disable the spying and they get mad at me, LOL.
Yup.
The comparison answers your question actually.
Comfort. There's a certain amount of comfort when you're within an abusive relationship. Yes, it's awful, yes you're being hurt over and over again, but you're familiar with it. You know what to expect, where as taking the leap and leaving for the unknown can be scary.
Okay, there's no difference?
None
There's people whose lives are at risk if they leave Discord?
Storing raw photos feels like storing plaintext passwords. Hackers have access to your password and your photo now.
As far as discord is concerned, I’m a proud citizen of Albania now. Much like Eric Adams.
really posting something from last year when the age thing is coming out
May? May? Just say that IDs where leaked. We all know nowdays that for sure are leaked.
Wow, and now they want to relay your info through 2 or 3 parties for verications.
So so so so so misleading to post this when this will be interpreted as an event from 2026. Post should be removed IMO.
There's a 2025 in the title
I get that. I mean, that's how I knew to come down here and say that it was misleading. But surely we can agree it's strange to post something a year old on this particular community. especially something like this, that in context of what's been going on with Discord really makes it seem like fresh news. Like, the 2025 part is only needed because the post is misleading to begin with
Now that Discord has begun rolling out the ID verification that they postponed a few months ago, I think it's a pretty important reminder. And as was said, the post title specifically says "(2025)"
Hmmm yeah that's fair. I wasn't seeing it that way
Stop reading the details a knee jerk with the rest of us nerd
I hope I never gave them that. I had Nitro for a bit, but I don't think I would have ever willingly gave them that.
Lots of adults don't even have a valid ID in the US.
Well now there should be plenty for them to buy on the black market if they don't want their own ;p
Oh this is gonna be sweet, my photo is of a 1970's pr0nstar.
This is the fediverse. No one is going to care if you use naughty words. Enjoy!
penus
oh goodness this is exciting
I saw someone in this very community get in trouble for using "the r word" yesterday lol
"Porn" is not a slur. You should be able to tell the difference.
Not all naughty words are slurs, but all slurs are naughty words. You should be able to tell the difference.
Seems like they are?
Caacaa Doodoo
teehee.
Now more than ever is the time to have a secondary ID. These hacks and data leaks are getting out of hand.
What is a secondary ID?
A grade A scannable ID, usually a driving license. It looks like you, but isn't you. Perfect for age verification and all this other nonsense they want us to do.
Where would one get this? Dark web?
I've sent you a private message with contacts.
How am I just now hearing about this?
Right? I didnt know about it.
we’re in a world now where we have to assume our photos, driver’s licenses and medical records are all leaked. Guard you bank account appropriately.
lol
Ooh no! Some Russian troll farm now knows my favorite color.
Calling soyjak and kiwifarms just "Russian troll farms" really undersell the problem with them, but I guess since they regularly go after "anarkiddies", it's okay.