Discord.io has suffered a major data breach affecting 760,000 members and their personal information. The website announced that Discord.io is a third-party service from Discord that helps users generate custom invites for their channels.
It is used by tons of small organizations, including IPTV Services, to communicate with customers and potential subscribers. The breach occurred on the night of August 14th, 2023. It resulted in sensitive information being exposed, including email addresses, billing addresses, and more.
The company noted that they believe the incident occurred due to a vulnerability in the website’s code. This vulnerability allowed attackers to gain access to their database. In a statement on their website, Discord.io listed the personal information exposed, which included non-sensitive and potentially sensitive information about user accounts.
- Your internal user ID, information about your avatar, and status were among the non-sensitive information. Your coin balance, current streak in the free minigame, API key, registration date, and last payment date were also exposed.
Additionally, potentially sensitive information included usernames, Discord IDs, email addresses, billing addresses, salted and hashed passwords, and more. Someone named Akhirah claimed to have the data and listed it for sale on the new Breached hacking forum.
The listing included examples to prove the information’s authenticity and the presence of a real threat. Tech website bleepingcomputer.com received a comment from Akhirah regarding Discord.io and its practices:
It’s not just about money; some servers they oversee discuss troubling topics; they should be blacklisted and prohibited.
Discord.io does not store any payment information, and all payments are processed through secure channels like PayPal and Stripe, which were not breached. Following the events, Discord.io has decided to shut down operations indefinitely for further investigation into the breach. They plan to rewrite the website’s code entirely and enhance security practices to prevent such incidents in the future.
You can read the full press release from Discord.io on their official website. Future negotiations with Akhirah and the unfolding events will be interesting to observe.
Share your thoughts on this story in the comments below! Stay updated with the latest streaming news and tips by following the TROYPOINT Advisor, providing cord-cutting tips for optimal streaming device use. Join over 800,000 Advisor subscribers for free via Free TROYPOINT Advisor.