Discord Blamed A Vendor For Its Data Breach — Now The Vendor Says It Was ‘not Hacked’

5CA is simply a customer work support institution that useful pinch Discord. Recently, nan chat level said nan vendor had been breached arsenic portion of a “security incident” wherever 70,000 authorities ID photos whitethorn person leaked. Now, 5CA says in a station connected its website that it was “not hacked.”

According to Discord, “this incident impacted a constricted number of users who had communicated pinch our Customer Support aliases Trust & Safety teams,” and “of nan accounts impacted globally, we person identified astir 70,000 users that whitethorn person had government-ID photos exposed, which our vendor utilized to reappraisal age-related appeals.” The institution said that (emphasis Discord’s) “this was not a breach of Discord, but alternatively a breach of a 3rd statement work provider, 5CA, that we utilized to support our customer work efforts.”

However, connected its website, 5CA shared its ain statement, which I americium including successful afloat beneath (with accent 5CA’s):

We are alert of media reports naming 5CA arsenic nan origin of a information breach involving 1 of our clients. Contrary to these reports, we tin corroborate that nary of 5CA’s systems were involved, and 5CA has not handled immoderate government-issued IDs for this client. All our platforms and systems stay secure, and customer information continues to beryllium protected nether strict information protection and information controls.

We are conducting an ongoing forensic investigation into nan matter and collaborating intimately pinch our client, arsenic good arsenic outer advisors, including cybersecurity experts and ethical hackers. Based connected interim findings, we tin corroborate that nan incident occurred outside of our systems and that 5CA was not hacked. There is nary grounds of immoderate effect connected different 5CA clients, systems, aliases data. Access controls, encryption, and monitoring systems are afloat operational and, arsenic a precautionary measure, are nether heightened review.

Our preliminary accusation suggests nan incident whitethorn person resulted from human error, nan grade of which is still nether investigation. We stay successful adjacent interaction pinch each applicable parties and will stock verified findings erstwhile confirmed.

We’ve asked 5CA to corroborate if it handled authorities ID photos and if it could stock much accusation astir nan “human error” that whitethorn person been involved. We’ve besides asked Discord if it tin corroborate which institution was successful possession of nan photos of authorities IDs that whitethorn person been accessed.