Discord reported that official ID photos and personal data of about 70,000 users may have been leaked after hackers breached a third-party age verification provider, not Discord’s own systems. The stolen data could include ID photos, partial credit card information, and messages exchanged with customer support, but no full credit card numbers, passwords, or user messages were exposed.

Discord said it has revoked the vendor’s access, notified all affected users, and is working with law enforcement to investigate. The company did not identify the third-party firm but confirmed the incident was not a ransomware attack.

While some online claims suggested the breach was larger, Discord denied this, calling those reports part of an extortion attempt. The platform, which has over 200 million users worldwide, has recently strengthened its age verification systems amid concerns about misuse of its servers for explicit or extremist content.