760K Users Affected by a Discord.io Hacker Attack
2 min. read
Updated on
Share this article
Improve this guide
Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more
The Discord.io custom invite service is temporarily not working after suffering a breach on August 14.
Hacker Akihirah stole information belonging to over 760,000 users and put it up for sale on hacking forums.
What happened?
A person known as Akihirah is now ready to sell the user data from Discord.io on popular cybercrime forum Breached.
The threat actor shared data belonging to four Discord.io users as proof of the theft.
According to the information on the forum, the database that is up for sale contains information on 760K members.
It includes sensitive data such as usernames, email addresses, Discord IDs, billing addresses, and salted and hashed passwords.
The popular Discord custom invite service confirmed that the breach occurred and has stopped operating since. It has been posting updates on the situation on its #breach-notification channel and will release more info on its website soon.
The service also revealed that it only found out about the attack after seeing that user information is up for sale on Breached.
Discord.io advised all users to change their passwords quickly to minimize the effect of Akihirah’s actions.
Since the hacker or anyone who buys the database can use the stolen email addresses for further phishing attacks, members should also be extra careful about suspicious messages in their inboxes.
Not just about the money
Akihirah said that they weren’t motivated by money. Instead, their main goal is to make Discord.io pay more attention to the type of content users share.
Their main concern is content displaying child abuse and similar harmful media.
Akihirah also confirmed that they haven’t sold the database yet, but that there has been interest in it. It’s mostly coming from people who want to dox other users.
Discord.io allows users to search for Discord channels that match the type of content they want to see. To access some of them, members have to spend virtual currency called Discord.io Coins.
