https://stackdiary.com/the-data-of-760000-discord-io-users-was-put-up-for-sale-on-the-darknet/ Skip to content Search for: [ ] Stack DiaryStack Diary Stack Diary For Developers, Designers, and Makers. Main Navigation * Home * About * Web + Development + Design + Tutorials + WordPress * Tech + Artificial Intelligence + Hosting + Linux Docs + Business * Contact Secondary Navigation * Development * Design * AI * Tech * Security * Business * Hosting * WordPress * Tutorials * Security The data of 760,000 Discord.io users was put up for sale on the darknet Alex Ivanovs avatarAlex Ivanovs avatar Alex Ivanovs August 14, 2023 | Reader Disclosure Disclosure: Our content is reader-supported. This means if you click on some of our links, then we may earn a commission. discordio breachdiscordio breach Note: I've gone ahead and updated the featured image, so it doesn't seem like this has something to do with Discord "directly". It was not my intention to leave an impression like that, but this still affects every single Discord user who was using the Discord.io service! An unidentified individual has listed the data of 760,000 Discord.io (the site is dead at the moment, so you can see an Archive.org snapshot here) users for sale on a darknet forum. This discovery was brought to light by the "Information Leaks" Telegram channel, associated with the Russian service for tracking vulnerabilities, data leaks, and monitoring fraudulent online resources. For clarity, Discord.io is/was a platform that allows you to create custom, personal Discord invites. The offered database comprises details like email addresses, hashed passwords, and other user-specific data. UPDATE: Discord.io team has now confirmed that the breach is real; an update is added at the bottom of the article! To vouch for the authenticity of the data, the seller presented a sample which was then reviewed by cybersecurity experts. Their evaluation confirmed that the sample logins are genuine, matching real Discord users. And just to make it clear - genuine, as in the corresponding email addresses from the leak, were verified to be associated with real Discord accounts through several password recovery tests. The implication here is that malevolent parties can exploit this data for phishing schemes, spamming, or other deceptive undertakings. discord potential leakdiscord potential leakInteresting text there at the bottom, "database access still available". This does look to be real, though. I tried reaching out to the Discord.io team on their Discord server, and two minutes after joining, every single channel got manually deleted. All the channels in the Discord.io server getting manually deleted. As of now, Discord itself has not provided an official response to the situation. However, for users of the platform, the advisable course of action is to promptly change passwords and activate two-factor authentication on their accounts to bolster security. Note: We have reached out to Discord for comments and are awaiting their response. Discord.io team confirms the breach is real; here's what you need to know The team behind Discord.io has officially confirmed the data breach. In a detailed statement on Discord, they provided a comprehensive account of the events that led to the breach, what data was compromised, and the subsequent actions they've taken. Timeline of Events: * Monday, August 14, 2023, 12:51 AM CET: A preview of the Discord.io user database appears on BreachForums. * Monday, August 14, 2023, 4:30 PM CET: Discord.io team becomes aware of the breach. * Monday, August 14, 2023, 4:36 PM CET: The breach's legitimacy is confirmed. * Monday, August 14, 2023, 4:40 PM CET: All Discord.io services commence shutdown. Data Compromised in the Breach: Non-Sensitive Information: * Internal user ID * Avatar details * User status (e.g., moderator, admin, has ads, banned, public) * Coin balance and current streak in the free minigame * API key (relevant for a limited number of users) * Registration and last payment dates, including premium membership expiration Potentially Sensitive Information: * Usernames, either from signup or the current Discord username * Discord ID * Email address associated with the account * Billing address (pertaining to a select few users who provided this before the adoption of Stripe for payments) * Salted and hashed passwords (mainly concerning users prior to 2018 when Discord.io began exclusively using Discord for logins) Data That Remained Secure: * Anything not explicitly mentioned in the compromised list. * Payment details, which are securely stored with partners Stripe and PayPal. Further Actions & Notes: * All existing premium subscriptions have been canceled, with the team set to contact subscribers individually. * As of their last update, the Discord.io team hasn't established contact with the culprits nor discerned if the database has been shared with the public. * A list of servers that once used Discord.io's service has been made available, though it might contain outdated or inactive links. * Users wishing to get in touch are encouraged to send a helpdesk request, with "Support" for general queries and "Admin" for sensitive matters. Given the gravity of the situation, the team cautions that they might not be able to address every message but appreciate user patience and understanding. Alex IvanovsAlex Ivanovs Written By Alex Ivanovs Alex is a full-stack developer with more than 15 years of experience. After many years of threading the self-taught path, he discovered a natural passion for writing. His past work includes helping build the Huffington Post Code column and working with publishers such as Entrepreneur, TheNextWeb, and many prominent tech startups. Post navigation Previous Post Previous Top 9 Free Code Editors and Coding Software for Windows Read also 1. Telegram turns 10 years old and releases Stories to everyone 2. The 10 Best Low-Code Development Platforms 3. The 5 Best Content Curation Tools & Platforms 4. The 9 Best Code Editors and IDEs for Mac 5. The 5 Best VPNs for Social Media: Unrestricted Access Stack DiaryStack Diary (c) 2023 Stack Diary - All rights reserved. Footer Menu * About * Advertise * Disclosure * Contact