Connect with us

Technologies

Discord Security Breach Exposed Government ID Photos of 70,000 Users

A third-party service provider was compromised, and information from people who had communicated with Discord’s customer support and trust and safety teams was exposed.

Hackers have stolen user information from Discord, the popular voice, video and text communication platform, through a third-party customer service provider, and government ID photos were among the information stolen. Discord posted about the breach on Oct. 3 and updated the post on Wednesday.

In the statement, Discord said that about 70,000 users may have had their government ID photos exposed. Those ID photos were shared with the third-party vendor to help review age-related appeals. You must be at least 13 to use the Discord site in the US and Canada, and other countries have different age limits. Specific age-restricted content is available only to those who are 18 and over.

«No messages or activities were accessed beyond what users may have discussed with customer support or trust & safety agents,» the statement said. «We immediately revoked the customer support provider’s access to our ticketing system and continue to investigate this matter.»


Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.


While Discord specifically called out the number of 70,000 affected users, Yahoo News cites a report from cybersecurity research group VX-Underground stating that «the attackers claim to have exfiltrated 1.5 terabytes of data, including approximately 2,185,151 images tied to age verification appeals.»

A representative for Discord reiterated the online statement and said, «the numbers being shared are incorrect and part of an attempt to extort a payment from Discord.» They added that the company, «will not reward those responsible for their illegal actions.»

Ransom wanted

It’s becoming more common for criminals who breach websites to demand payment to keep the information they have stolen private, and Discord said this is happening here.

«An unauthorized party targeted our third-party customer support services to access user data, with a view to extort a financial ransom from Discord,» the statement said.

The statement said law enforcement is involved in the case.

What information was taken?

The Discord statement says that stolen information may include names, Discord usernames, email addresses and other contact details that people may have provided to customer support. Messages shared with customer support, including those government ID images, were also stolen. 

Discord says that «limited billing information,» including the last four digits of credit card numbers, was stolen, but not full credit card numbers or CCV codes. The site also says that password and authentication data wasn’t stolen.

It seems likely that this kind of theft will only grow as more sites must comply with age verification laws in certain US states and other countries that are cracking down on verifying users’ age to use a site. Those provided government IDs may be enough for the site to grant people the right to see certain content, but once those IDs are in the site’s databases, they can be stolen.

What do I do now?

The Oct. 8 message says Discord is «in the process of contacting impacted users,» who should look for messages from noreply@discord.com, and that the site will not use the phone to reach users.

It sounds like there’s not a lot Discord users can do at the moment, except to keep an eye out for suspicious messages or calls that could use the stolen information to try to trick or phish users. Enable two-factor authentication if you don’t already have it enabled.

User reaction

Some Reddit users say Discord never responded to their age-verification appeals, even though they were then notified that their information was compromised.

«Discord ignored my ID verification ticket for 2 weeks just to tell me that the same ticket has been involved in a data breach,» wrote one Reddit user. «I’m honestly happy that I didin’t give it to them, got blocked access to half of the servers I’m in but it’s better than having my ID leaked I guess.»

Another person said something similar happened to them, too.

«Got the same email just now,» one person wrote on Reddit. «I appealed my age determination in August. Got a few emails back, but long story short the robot on the other end never accepted my ID. Nearly 2 months later, I’m told my data was leaked on the internet because Discord management doesn’t have its priorities in check.»

Technologies

Google races to put Gemini at the center of Android before Apple’s AI reboot

Google is using its latest Android rollout to position Gemini as the AI layer across phones, Chrome, laptops and cars.

Google is using its latest Android rollout to make Gemini less of a chatbot and more of an operating layer across the phone, browser, car and laptop, just weeks before Apple is expected to show its own Gemini-powered Apple Intelligence reboot at WWDC.
Ahead of its Google I/O developer conference next week, the company previewed a number of Android updates, including AI-powered app automation, a smarter version of Chrome on Android, new tools for creators, a redesigned Android Auto experience, and a sweeping set of new security features.
Alphabet is counting on Gemini to help Google compete directly with OpenAI and Anthropic in the market for artificial intelligence models and services, while also serving as the AI backbone across its expansive portfolio of products, including Android. Meanwhile, Gemini is powering part of Apple’s new AI strategy, giving Google a role in the iPhone maker’s reset even as it races to prove its own version of personal AI on the phone is further along.
Sameer Samat, who oversees Google’s Android ecosystem, told CNBC that Google is rebuilding parts of Android around Gemini Intelligence to help users complete everyday tasks more easily.
“We’re transitioning from an operating system to an intelligence system,” he said.
As part of Tuesday’s announcements. Google said Gemini Intelligence will be able to move across apps, understand what’s on the screen and complete tasks that would normally require a user to jump between multiple services. That means Android is moving beyond the traditional assistant model, where users ask a question and get an answer, and acting more like an agent.
For instance, Google says Gemini can pull relevant information from Gmail, build shopping carts and book reservations. Samat gave the example of asking Gemini to look at the guest list for a barbecue, build a menu, add ingredients to an Instacart list and return for approval before checkout.
A big concern surrounding agentic AI involves software taking action on a user’s behalf without permissions. Samat said Gemini will come back to the user before completing a transaction, adding, “the human is always in the loop.”
Four months after announcing its Gemini deal with Google, Apple is under pressure to show a more capable version of Apple Intelligence, which has been a relative laggard on the market. Apple has long framed privacy, hardware integration and control of the user experience as its advantages.
Google’s Android push is designed to show it can bring AI deeper into the device experience while still giving users control over what Gemini can see, where it can act and when it needs confirmation.
The app automation features will roll out in waves, starting with the latest Samsung Galaxy and Google Pixel phones this summer, before expanding across more Android devices, including watches, cars, glasses and laptops later this year.
The company is also redesigning Android Auto around Gemini, turning the car into another major surface for its assistant. Android Auto is in more than 250 million cars, and Google says the new release includes its biggest maps update in a decade and Gemini-powered help with tasks like ordering dinner while driving.
Alphabet’s AI strategy has been embraced by Wall Street, which has pushed the company’s stock price up more than 140% in the past year, compared to Apple’s roughly 40% gain. Investors now want to see how Gemini can become more central to the products people use every day.
WATCH: Alphabet briefly tops Nvidia after report of $200 billion Anthropic cloud deal

Continue Reading

Technologies

Waymo recalls 3,800 robotaxis after glitch allowed some vehicles to ‘drive into standing water’

Waymo issued a voluntary recall of about 3,800 of its robotaxis to fix software issues that could allow them to drive into flooded roadways.

Waymo is recalling about 3,800 robotaxis in the U.S. to fix software issues that could allow them to “drive onto a flooded roadway,” according to a letter on the National Highway Traffic Safety Administration’s website.
The voluntary recall is for Waymo vehicles that use the company’s fifth and sixth generation automated driving systems (or ADS), the U.S. auto safety regulator said in the letter posted Tuesday.
Waymo autonomous vehicles in Austin, Texas, were seen on camera driving onto a flooded street and stalling, requiring other drivers to navigate around them. It’s the latest example of a safety-related issue for the Alphabet-owned AV unit that’s rapidly bolstering its fleet of vehicles and entering new U.S. markets.
Waymo has drawn criticism for its vehicles failing to yield to school buses in Austin, and for the performance of its vehicles during widespread power outages in San Francisco in December, when robotaxis halted in traffic, causing gridlock.
The company said in a statement on Tuesday that it’s “identified an area of improvement regarding untraversable flooded lanes specific to higher-speed roadways,” and opted to file a “voluntary software recall” with the NHTSA.
“Waymo provides over half a million trips every week in some of the most challenging driving environments across the U.S., and safety is our primary priority,” the company said.
Waymo added that it’s working on “additional software safeguards” and has put “mitigations” in place, limiting where its robotaxis operate during extreme weather, so that they avoid “areas where flash flooding might occur” in periods of intense rain.
WATCH: Waymo launches new autonomous system in Chinese-made vehicle

Continue Reading

Technologies

Qualcomm tumbles 13% as semiconductor stocks retreat from historic AI-fueled surge

Semiconductor equities reversed sharply after a broad AI-driven advance, with Qualcomm suffering its worst day since 2020 amid inflation concerns and rising oil prices.

Semiconductor stocks fell sharply on Tuesday, reversing course after an extensive rally that had expanded the artificial intelligence investment theme well past Nvidia and driven the industry to unprecedented levels.

Qualcomm plunged 13% and was on track for its steepest single-day decline since 2020. Intel shed 8%, while On Semiconductor and Skyworks Solutions each lost more than 6%. The iShares Semiconductor ETF, which benchmarks the overall sector, fell 5%.

The sell-off came after a key gauge of consumer prices came in above forecasts, and as conflict in Iran pushed crude oil higher—prompting investors to shift away from riskier assets.

The preceding advance had widened the AI opportunity set beyond longtime industry leader Nvidia, which for much of the past several years had largely carried the market to new peaks on its own.

Explosive appetite for central processing units, along with the graphics processing units that power large language models, has sent chipmakers to all-time highs.

Market participants are wagering that the shift from AI model training to autonomous agents will lift demand for additional AI hardware. Among the beneficiaries are memory chip producers, which are raising prices as supply remains tight.

Micron Technology slid 6%, and Sandisk cratered 8%. Sandisk’s stock has surged more than six times over since January.

Continue Reading

Trending

Copyright © Verum World Media