Security News > 2023 > August > Discord.io pulls the cord after crooks steal 760K users' info

Discord.io pulls the cord after crooks steal 760K users' info
2023-08-16 22:58

Discord.io has shut down "For the foreseeable future," after crooks stole, and then put up for sale, data belonging to all 760,000 of the service's users.

To be clear: the intrusion happened to Discord.io, a third-party service for creating custom invites for individual Discord servers.

Discord.io said it confirmed the dumped data was taken from its systems, and because of this "Decided to take down our site until further notice." While an investigation is still ongoing, the site administrators say they believe the intruders gained access to the website via buggy code, which allowed them to break into the database.

Stolen data includes users' names, email addresses, Discord IDs, and billing addresses of anyone who made a purchase on the site before Discord.io began using Stripe.

The crooks did not access payment information, which Discord.io says it does not store on its servers any more since moving to Stripe and PayPal.

As well as shutting down the site, Discord.io has also cancelled all active subscriptions, and promised to refund all premium memberships purchased in the last 30 days.


News URL

https://go.theregister.com/feed/www.theregister.com/2023/08/16/discordio_shuts_down_security/