Also used extensively by cryptocurrency investors Discord The app warned of a data leak a few minutes ago. Although this cryptocurrency does not directly concern investors, its indirect consequences may be worrying. Discord data leak Fortunately, it does not cover all user information.
Discord Data Leak
According to the email the company sent to customers, there was a limited data leak due to third-party customer service partners. The following information of users who contacted Discord through customer services or security unit was obtained. The attackers demanded a ransom payment from Discord officials, threatening to disclose the data they captured.
- Name
- User name
- Limited Part of Credit Card Number
- IP Address
- Messages with customer service
Identity images of some users who contacted customer services are also among the leaked data. Full credit card information and user passwords were not affected by the leak.
What Can Be Done?
If Discord sent you a warning email, it did so because you were affected by the leak. If you have shared your identity image, attackers can use it on exchanges with weaker KYC and AML policies. Additionally, your e-mail address may become a target for fraudsters. One of the main problems here is matching real name information and e-mail addresses.
Goal oriented employee Lazarus Attackers such as can use this data to attack administrators of popular crypto protocols. We have seen many times before that attackers who captured personal e-mail addresses carried out attacks by targeting cryptocurrency investors and protocol team members.
Then, after the Discord warning email, it may be useful to consider the worst-case scenario, check the difficulty level of your email password, and activate 2-factor authentication. Additionally, if you are a popular user on Discord, it has been prepared with special scenarios for you. phishing You may be the target of their emails.
Finally, some of the users with anonymous identities were also exposed with this leak. If some well-known names in crypto have interacted with Discord customer services, their identities may be revealed in the coming days when the data is published publicly (they usually do this when they cannot get a ransom).
