cyberpunk007@lemmy.ca
on 10 Oct 16:03
nextcollapse
"A catastrophic breach has impacted Discord user data including selfies and identity documents uploaded as part of the app’s verification process, email addresses, phone numbers, approximately where the user lives, and much more. "
Discord requires selfies now? Lol.
I tried again recently to make a fake Facebook account since nobody uses other places to buy and sell used shit. Logged in then they asked for a 360 degree video of my head.
A catastrophic data breach at Discord’s third-party vendor Zendesk has exposed sensitive user information, including ID documents and selfies uploaded for age verification[^1][^2]. At least 70,000 people were impacted by the breach, with hackers leaking users’ driver’s licenses, approximate locations, real names, and emails[^2].
The hackers are attempting to extort Discord and have already shared leaked selfies of users posing with their IDs in a Telegram group, along with a spreadsheet containing detailed information on a thousand users[^2].
This breach validates critics’ concerns about tech companies collecting sensitive identity documents, particularly in light of recent age verification requirements in countries like the UK[^2]. As one security expert notes in Gadgeteer, “a password is easy to change, but an ID document is often a nightmare to change, and the ID number anyway stays the same”[^4].
Discord says it is working with affected users and authorities but won’t give in to the hackers’ demands[^2].
From Discord’s age verification page, under “Privacy and Data Security”:
Q: Is my data stored when I use Face Scan or Scan ID verification?
A: Discord and k-ID do not permanently store personal identity documents or your video selfies. The image of your identity document and the ID face match selfie are deleted directly after your age group is confirmed, and the video selfie used for facial age estimation never leaves your device.
threaded - newest
"A catastrophic breach has impacted Discord user data including selfies and identity documents uploaded as part of the app’s verification process, email addresses, phone numbers, approximately where the user lives, and much more. "
Discord requires selfies now? Lol.
I tried again recently to make a fake Facebook account since nobody uses other places to buy and sell used shit. Logged in then they asked for a 360 degree video of my head.
Nope.
Who are the idiots that do this anyways?
Facebook wants a 360 of your head? Wtf??
Shouldn’t your face be enough for Facebook?
How else are they going to train their AI to make stupid images of yourself?
every user worst nightmare is joining discord with non-temp email, like a rube.
(Fucking paywall article)
Summary
A catastrophic data breach at Discord’s third-party vendor Zendesk has exposed sensitive user information, including ID documents and selfies uploaded for age verification[^1][^2]. At least 70,000 people were impacted by the breach, with hackers leaking users’ driver’s licenses, approximate locations, real names, and emails[^2].
The hackers are attempting to extort Discord and have already shared leaked selfies of users posing with their IDs in a Telegram group, along with a spreadsheet containing detailed information on a thousand users[^2].
This breach validates critics’ concerns about tech companies collecting sensitive identity documents, particularly in light of recent age verification requirements in countries like the UK[^2]. As one security expert notes in Gadgeteer, “a password is easy to change, but an ID document is often a nightmare to change, and the ID number anyway stays the same”[^4].
Discord says it is working with affected users and authorities but won’t give in to the hackers’ demands[^2].
[^1]: 404 Media - The Discord Hack is Every User’s Worst Nightmare [^2]: The Flagship Eclipse - Discord Suffers Major Hack Making Users’ Worst Nightmare Come True [^4]: Gadgeteer - The Discord Hack is Every User’s Worst Nightmare — Why Uploaded IDs are a Problem
Archive link: archive.is/KFUuV
From Discord’s age verification page, under “Privacy and Data Security”:
…discord.com/…/30326565624343-How-to-Complete-Age…
archive.is/FBqo5
So is that a lie?
A fucking lie from a shitty company
Should be sued to death.
Can’t because couple months ago they opted everybody into forced arbitration
Technically no, but they leave out the tiny detail that the 3rd party vendor they use (who had the breach) stores the data.