Discord.io reported a data leak and suspended work – Kommersant

The Discord.io platform (the server directory for the Discord messaging system) has reported a hack that has left its user database in the possession of unknown individuals. The platform has suspended the operation of all services and operations, according to the website. Discord.io.

“We are continuing our investigation, but we believe that the hack was caused by a vulnerability in the code of our site, which allowed an attacker to gain access to our database. The attacker then downloaded the entire database and put it up for sale on a third-party site,” the platform said in a statement.

It is clarified that the network, in particular, got confidential information about the user account, including the names indicated by them during registration, Discord ID (user identifier), email addresses, billing addresses (users indicated them before the implementation of the Discord system Stripe electronic payments), salted and hashed passwords (encrypted using certain algorithms).

Discord.io emphasized that the platform does not store user payment information, all payments are made through PayPal and Stripe, so there was no such data leak. The developers plan to completely rewrite the site’s code and revise security practices so that such leaks never happen again.

According to the magazine “Hacker”, a database of 760,000 Discord users was put up for sale on the dark web, on the black hacking forum Breached. Akhirah, a hacker who put the database up for sale, told the publication Bleeping Computerthat Discord.io was hacked not only for money, but also because the service turns a blind eye to illegal and harmful content, including those related to pedophilia. He said he was waiting to be contacted by the platform’s operators to negotiate the removal of the harmful content. Then he is supposedly ready to refuse to drain the data.

Erdni Kagaltynov