Discord / 5CA Data Breach: Difference between revisions
OskaRRRitoS (talk | contribs) Initial write-up for this incident |
Added archive URLs for 1 citation(s) using CRWCitationBot |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1: | Line 1: | ||
{{IncidentCargo | |||
|Company=5CA, Discord | |||
|StartDate=2025-10-03 | |||
|EndDate= | |||
|Status= | |||
|ProductLine= | |||
|Product=Discord | |||
|ArticleType= | |||
|Type=Data, ID, Privacy | |||
|Description= | |||
}} | |||
On 3rd October 2025, [[Discord]] published a press release stating that one of their third-party service providers, later revealed to be [[5CA]], was the target of a data breach. Discord states that they have identified around 70,000 users that may have been impacted by having images of their government ID taken.<ref name=":0">{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251220165327/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=20 Dec 2025 |access-date=2025-10-13 |website=Discord}}</ref> | On 3rd October 2025, [[Discord]] published a press release stating that one of their third-party service providers, later revealed to be [[5CA]], was the target of a data breach. Discord states that they have identified around 70,000 users that may have been impacted by having images of their government ID taken.<ref name=":0">{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251220165327/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=20 Dec 2025 |access-date=2025-10-13 |website=Discord}}</ref> | ||
== Background == | == Background == | ||
In 2023, the UK government passed the [[UK Online Safety Act|Online Safety Act]]. In 2025, the Online Safety Act was amended to require platforms to verify the age of its users when they try to access content considered harmful to children.<ref name=":2">{{Cite web |date=April 24, 2025 |title=Online Safety Act: explainer |url=https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer |website=Gov.uk}}</ref> | In 2023, the UK government passed the [[UK Online Safety Act|Online Safety Act]]. In 2025, the Online Safety Act was amended to require platforms to verify the age of its users when they try to access content considered harmful to children.<ref name=":2">{{Cite web |date=April 24, 2025 |title=Online Safety Act: explainer |url=https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer |website=Gov.uk |url-status=live |archive-url=http://web.archive.org/web/20260212093923/https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer |archive-date=12 Feb 2026}}</ref> | ||
Discord implemented age verification in 2025. A user could verify their age using face scanning or by uploading a picture of their government-issued ID. If the face scan does not correctly determine the user's age as old enough, using their ID becomes the only option to confirm their age.<ref>{{Cite web |last=Rahman-Jones1 Vallance2 |first=Imran1 Chris2 |date=2025-04-17 |title=Discord's face scanning age checks 'start of a bigger shift' |url=https://www.bbc.co.uk/news/articles/cjr75wypg0vo |url-status=live |archive-url=https://web.archive.org/web/20251230081436/https://www.bbc.co.uk/news/articles/cjr75wypg0vo |archive-date=2025-12-30 |access-date=2026-01-10 |website=BBC}}</ref> | Discord implemented age verification in 2025. A user could verify their age using face scanning or by uploading a picture of their government-issued ID. If the face scan does not correctly determine the user's age as old enough, using their ID becomes the only option to confirm their age.<ref>{{Cite web |last=Rahman-Jones1 Vallance2 |first=Imran1 Chris2 |date=2025-04-17 |title=Discord's face scanning age checks 'start of a bigger shift' |url=https://www.bbc.co.uk/news/articles/cjr75wypg0vo |url-status=live |archive-url=https://web.archive.org/web/20251230081436/https://www.bbc.co.uk/news/articles/cjr75wypg0vo |archive-date=2025-12-30 |access-date=2026-01-10 |website=BBC}}</ref> | ||