Discord's custom invitation service 'Discord.io' stops service due to user data leak



Discord's third-party service ' Discord.io ' has leaked the data of 760,000 users and is being sold on forums. In response to this situation, Discord.io has temporarily suspended its service.

Discord.io

https://discord.io/servers



The data of 760,000 Discord.io users was put up for sale on the darknet

https://stackdiary.com/the-data-of-760000-discord-io-users-was-put-up-for-sale-on-the-darknet/



Discord.io confirms breach after hacker steals data of 760K users
https://www.bleepingcomputer.com/news/security/discordio-confirms-breach-after-hacker-steals-data-of-760k-users/

Discord.io is Discord's third-party service that allows you to create custom invitations to channels.

On August 14, 2023, Telegram channel Утечки информации, which monitors unauthorized online resources, revealed that Discord.io data was being sold on an external forum.

На теневом форуме выставили на продажу базу данных зарегистрированных пользователей и доступ к серверу discord.io - стороннему и нтерфейсу для Discord.



According to Discord.io, the data was posted at 12:51 ( CET ) on August 14th, and at 16:30, 'Data has been posted to the forum' to Discord.io. I was contacted.

Discord.io confirmed that the data posted at 16:36 was genuine and stopped all services at 16:40. At the time Discord.io confirmed, the database itself was not published.

Sensitive information that may have been leaked is username, Discord ID, email address, billing address, hashed password, of which password may only affect those who set it before 2018.

Discord.io has also suspended premium plan subscriptions due to data breaches.

in Web Service,   Security, Posted by logc_nt