The corporate Discord blamed for its latest breach says it wasn’t hacked

Customer support assist firm 5CA has launched a statement contradicting claims by Discord that it was the victim of a hack final month. On October 3, Discord disclosed a knowledge breach that the corporate says included a “small quantity” of presidency IDs like driver’s licenses and passports, which some customers had submitted to confirm their ages. Days later the corporate up to date its statement to call 5CA because the goal of the hack, which Discord contracts as a part of its customer support efforts. It additionally disclosed that the “small quantity” of presidency IDs encompasses roughly 70,000 customers.

“We’re conscious of media stories naming 5CA as the reason for a knowledge breach involving one in every of our purchasers. Opposite to those stories, we are able to verify that none of 5CA’s methods had been concerned, and 5CA has not dealt with any government-issued IDs for this shopper. All our platforms and methods stay safe, and shopper knowledge continues to be protected below strict knowledge safety and safety controls,” the corporate’s assertion reads partly. The corporate goes on to explicitly state “the incident occurred outdoors of our methods and that 5CA was not hacked.”

5CA says {that a} preliminary investigation confirmed that the incident could have been the results of “human error,” although it presents no particulars as to what precisely that suggests. In a latest interview with BleepingComputer, the hackers who claimed duty for the breach mentioned they’d entry to Discord’s Zendesk account for 58 hours on September 20. The group claims they gained entry by compromised login credentials belonging to a assist agent employed by a third-party firm. Discord has not but responded to the corporate’s claims.

Replace 2:58 PM ET: Added extra context concerning the breach.