The corporate Discord blamed for its latest breach says it wasn’t hacked

Customer support assist firm 5CA has launched a statement contradicting claims by Discord that it was the victim of a hack final month. On October 3, Discord disclosed a knowledge breach that the corporate says included a “small quantity” of presidency IDs like driver’s licenses and passports, which some customers had submitted to confirm their ages. Days later the corporate up to date its statement to call 5CA because the goal of the hack, which Discord contracts as a part of its customer support efforts. It additionally disclosed that the “small quantity” of presidency IDs encompasses roughly 70,000 customers.

“We’re conscious of media studies naming 5CA as the reason for a knowledge breach involving one in all our shoppers. Opposite to those studies, we will verify that none of 5CA’s techniques had been concerned, and 5CA has not dealt with any government-issued IDs for this shopper. All our platforms and techniques stay safe, and shopper knowledge continues to be protected beneath strict knowledge safety and safety controls,” the corporate’s assertion reads partially. The corporate goes on to explicitly state “the incident occurred outdoors of our techniques and that 5CA was not hacked.”

5CA says {that a} preliminary investigation confirmed that the incident might have been the results of “human error,” although it affords no particulars as to what precisely that suggests. In a latest interview with BleepingComputer, the hackers who claimed accountability for the breach mentioned that they had entry to Discord’s Zendesk account for 58 hours on September 20. The group claims they gained entry via compromised login credentials belonging to a assist agent employed by a third-party firm. Discord has not but responded to the corporate’s claims.

Replace 2:58 PM ET: Added extra context concerning the breach.