The new data demonstrate the value of the leak that has suffered from a third -party disorder. There may be more than 2 million images of official documents, though the company confirms only 70,000. A attackers They assure that they were able to access 1.5 Terrabyte data And they threaten to do everything if they do not receive the financial award they ask.
In the information press, updated as of October 8, Discord assures that they have discovered about 70,000 images of official documents that were traced. This figure contrasts with what is given cybercrime claiming that, in particular, 21851 images are traced from the external service Zandesk.
The problem is for the disorder
This data violation occurred on September 20. Although this was not something that directly affected the strife server, it affected A External Supplier of Customer Services. Behind this problem is a group of cybercriminals known as scattered $ $. They have claimed responsibility and those who ask for economic salvation. This is a team formed in 2025 by a fusion of three important groups: Lapsus $, scattered spider and tires. Especially they use social engineering for the scam.
This group assures that the total number of images of the official documents they were able to receive exceeds 2 million. Through the social network VX-UNDERGRound (@vxunderground), specialized in the field of security and malware, made a publication showing that, according to the attackers, More than 2 million concrete users They can be in trouble.
Chat, we prepare
The discord is required by the people who violated their copy Zendesk
They have 1.5 TV photos related to age checking. 2185,151 photos
TL; DR 2.1M Discord Drivers Lengiers and/or Passport may be traced. An unknown number of emails
October 8, 2025 • 10:04
These are the image leaks that we are in Redgon cannot really quantify, and can only indicate that the discord speaks of 70,000, and the attackers say that exceeds 2 million includes official documents For example, identity documents, driving licenses, passports and even email addresses.
Also, as shown from the disorder, they were leaked Limited billing data (eg, payment type or the last four digits of the bank card), messages that have been exchanged with customer service agents and Ip -dresses. However, the most disturbing is the images of official documents that were abducted.
From the disorder they assure that this figure exceeds 2 million is false and just Strategy within extortion What the attackers do. As it is often in this type of leak, hackers require money so as not to make it all the contents.
Disagreement does not pay
In the conditions of the ransomware, the recommendation is Never pay for redemption. It is clear that the National Cybersecurity Institute is given. On the one hand, it should be noted that nothing will guarantee that they will return control over the payment. On the other hand, when the victim pays, these types of attacks will continue and affect others in the future.
The discord publicly noted this do not pay cybercriminals. They quickly initiated an internal investigation through a company specializing in computer forensics, in addition to cooperation with the police to solve this problem with guarantees. It should be noted that from the beginning they have withdrawn access to the broken supplier.
Do you have an account account? It is likely that your data was leaks. However, it should be noted that this only affected users who have contacted customer support through this external provider. Anyway, the disorder is in the process of notification of all perhaps affected by email from noreply@discord.comReporting the problem so that they may know about it.
Often ask questions Disagption is a very popular messaging service in some countries. It also allows you to call via voip. They may receive phishing attacks or use their personal information to get themselves online. No, no passwords were leaked or filled with payment. Only information like a user name, limited payment data, and images of official documents.
What is a discord?
What could happen to the affected users?
Were the password leaks?
