What happened with Discord and what does the so-called Discord leak on BreachForums have to with it? Learn everything with BreachDirectory.com.
Preface
“Since April 2024, over 348.3+ million public messages on Discord have been retrieved from around 1,000 servers worldwide.” At least, that’s what hackers claim.
Recently, a post on a hacking forum BreachForums has been garnering a lot of attention:
According to the hacker, the purported Discord leak contains 348,392,718 scraped messages obtained between the timeframe of April 2024 to February 2025. In this case „Target Countries“ and „Target Servers“ may mean the countries in which servers were located, rather than individual users of Discord.
The Discord Leak – What Happened and What Data is at Risk?
According to sources on the web, the information related to Discord customers (users) should still be safe, however, the hackers claims to possess the following information as part of the Discord leak:
- User IDs
- Usernames and display names
- Message contents
- Guild and channel IDs
- Message timestamps
Such a data set could certainly be used to create a detailed OSINT footprint on many users. As this Discord leak doesn‘t contain passwords in any form, this Discord leak may not look like much from the outset, however, it does allow nefarious parties to combine the data in this Discord leak with something else they may have in their possession (other data breaches) to cause further harm to associated parties.
What Can You Do?
Unfortunately, there‘s little Discord users can do to contain the fallout of this Discord leak. However, there are some things that can be accomplished:
- Log in to your Discord account and inspect all of the messages sent between April 2024 and February 2025 – consider all of them to be compromised.
- Identify any and all sensitive data within those messages – then, change the details associated with them if possible to make it useless for an attacker. E.g. if you‘ve shared that you use the website X with a username Y, log in to that website and change your username (changing your password on and off is a great idea too), etc.
- Make use of data breach search engines like BreachDirectory – data breach search engines like BreachDirectory will help you ensure that your identity is not stolen, and advise you on what to do if your data is at risk. Make sure to use data breach search engines such as BreachDirectory periodically to make sure you‘re on the safe side.
- Register for data breach notifications – to ensure that you stay updated in what‘s happening in the data breach world, make sure you register for data breach notifications. Register today and receive a report whether your identity has been compromised or not!
- If you‘re a developer, keep your skills sharp by staying updated on the latest database security threats and beyond – reading the book Hacking MySQL: Breaking, Optimizing, and Securing MySQL for Your Use Case is a great place to start.
Summary
The Discord leak is worrisome to many Discord users and beyond. It doesn‘t contain the passwords of users so it‘s of limited to use to potential attackers – however, the Discord leak does contain data that may be combined with data in other data breaches to cause harm.
To stay protected, ensure you regularly use data breach search engines like BreachDirectory, implement the data in data breach search engines using the BreachDirectory API for your use case if necessary, and make sure to register for data breach notifications to stay on top of the data breach world no matter what happens.
Furthermore, if you‘re a developer, ensure you stay on top of what‘s happening in the database world by reading a book or two. Hacking MySQL: Breaking, Optimizing, and Securing MySQL for Your Use Case will walk you through what developers do to „break“ their database instances (make queries perform slowly), how to optimize your SQL query performance, and tell you how best to secure your most vital assets. Start reading the book today!
FAQ
What‘s the Discord Leak?
The Discord leak has to do with hackers sharing over 348.3 million messages exchanged on Discord between April 2024 and February 2025. The leak is said to contain user IDs, usernames and display names, message contents, guild and channel IDs, as well as timestamps associated with messages.
Are Passwords Included in the Discord Leak?
No, at least not based on a preliminary analysis of publicly available information.
When to Use BreachDirectory.com?
Consider using BreachDirectory every now and then to ensure that your data is not at risk of identity theft. Also, consider registering for data breach notifications to get notified every time your data might be at risk.