Almeida Law Group is investigating a data breach at Discord Inc. The breach occurred on 07/09/2024 and was discovered on 08/02/2025. If you were affected, contact Almeida Law Group.
About Discord Inc
Discord Inc. is a communication platform company headquartered in San Francisco, California that provides voice, video, and text messaging services. Founded in 2015, it serves over 200 million monthly active users across gaming and other online communities. The specific types of personal information involved in the incident described in this filing were not specified.
What Happened?
Discord Inc. was listed in a Maine Attorney General filing reported on June 8, 2026. The filing describes the incident type as insider wrongdoing and lists over 10 million total persons affected. The stated consumer notification date is 01/01/2000, and no identity theft protection was offered per the filing.
Important caveat: This Maine AG filing was not submitted by Discord Inc. It was filed by an individual identifying themselves as a “Data Subject / Reporter” named Xavier Morrison, using a personal Gmail address and a placeholder phone number. Key details in the filing — including the breach date of 07/09/2024, the notification date of 01/01/2000, a count of over 10 million affected persons, and the characterization of the cause as insider wrongdoing — are inconsistent with Discord’s own confirmed breach disclosures. Discord’s verified major security incident occurred around September 20, 2025, was attributed to a compromise of third-party customer service vendor 5CA, affected approximately 70,000 users, and was publicly disclosed on October 3, 2025. This filing should not be treated as an official corporate notification and may not accurately reflect any confirmed incident at Discord.
Separately, Discord has a documented history of security incidents. In May 2023, a support agent account compromise exposed email addresses and support ticket data. In April 2024, a third-party service called Spy.pet scraped over 4 billion public Discord messages. In the confirmed September–October 2025 incident involving vendor 5CA, the threat group Scattered Lapsus$ Hunters claimed responsibility and demanded a ransom; approximately 70,000 government ID images and user data were exposed. A class action lawsuit — Uceta v. Discord Inc., Case No. 3:25-cv-08582 — was filed in October 2025 in the U.S. District Court for the Northern District of California, alleging Discord failed to adequately protect user personal information. As of early 2026, no settlement had been reached.
Key Facts at a Glance
- Company or Organization: Discord Inc
- Industry: Communication Platform / Social Media / Software Development
- Location: 444 De Haro Street, San Francisco, CA 94107
- Incident type: Insider wrongdoing (as reported in filing; unverified)
- Date of breach: 07/09/2024 (as listed in filing; inconsistent with confirmed Discord disclosures)
- Date breach discovered: 08/02/2025
- Date of consumer notification: 01/01/2000 (as listed in filing; likely a placeholder)
- Total persons affected: Over 10 million (as listed in filing; inconsistent with confirmed Discord disclosures)
- Prior breach: Yes — May 2023 support ticket breach; April 2024 Spy.pet scraping; September 2025 vendor (5CA) breach
- Litigation status: Uceta v. Discord Inc., No. 3:25-cv-08582 (N.D. Cal., filed October 2025); no settlement as of early 2026
- Source: Maine AG Filing; Discord Official Press Release; Top Class Actions: Uceta v. Discord
What Should You Do?
If you believe you may have been affected by any Discord security incident, consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) and monitoring your credit reports at AnnualCreditReport.com. Review your financial accounts and online accounts for any suspicious activity. If you receive any notification from Discord offering credit monitoring, enroll promptly and note any enrollment deadline. If you believe your identity has been misused, visit IdentityTheft.gov for step-by-step guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
