70,000 instead of 2.1 million: Discord was hacked, but the all-clear has been given in some cases – here’s what you need to know

Discord was hacked, but according to Discord, the attackers completely exaggerated the situation.

At the end of September 2025, Discord customer data – including real names, email addresses, and more – was compromised in a cyberattack. According to those responsible, 2.1 million records and a total of 1.5 terabytes of data were stolen. 

Discord data hacked: What you need to know

Who exactly was hacked? 
According to Discord’s statement, none of Discord’s own systems were hacked, but rather those of third-party provider 5CA. Discord uses this provider in connection with its customer support.

What data did the attackers steal? According to Discord, the hackers gained access to various data:

• Names, Discord usernames, email addresses, and other contact information provided to Discord customer support
• Limited billing information, such as payment methods, the last four digits of credit cards, and purchase history, if associated with the account
• IP addresses
• Messages with customer service representatives
• Limited company data (training materials, internal presentations)

Discord clarifies that only users who have interacted with Discord support in recent months are affected.

What data was not stolen? Discord explicitly emphasizes which data was not compromised:

• Full credit card numbers or CCV codes
• Messages or activities on Discord that go beyond what users discussed with customer support
• Passwords or authentication data

Discord hack no big deal?

Discord states to Insider Gaming that the attack was nowhere near as extensive as the hackers had originally claimed. Instead of 2.1 million records, the number is only 70,000, according to Nu Wexler, spokesperson for Discord.
Discord makes it clear that the attackers deliberately exaggerated the numbers in order to extort more ransom money.

The attackers initially demanded $5 million and later reduced their demand to $3.5 million.

Between September 25 and October 2, both parties tried in vain to reach an agreement. After the negotiations failed, the hackers threatened to publish the stolen data.

What happens next?

Wexler describes the measures taken in a statement to Insider Gaming:

• All affected users have been contacted.
• They are working with law enforcement agencies, data protection authorities, and external security experts to investigate the case.
• The collaboration with the third-party provider has been terminated.

Who is behind the attack? The hacker group “Scattered Lapsus$ Hunters” is allegedly responsible for the attack. It has already carried out successful attacks on Jaguar and Marks & Spencer.