David Bridges
UPDATE: Feb. 3, 2025, 3:59 p.m. EST RestoreCord has provided a response to Mashable regarding the recent data leak that was highlighted on the well-known hacker forum BreachForums. The article has been updated to incorporate this latest information.
According to RestoreCord, a third-party backup service for Discord, the breach initially reported by Leakd is “not accurate.” The company clarified that there was a “minor incident in November 2023 where an employee inadvertently disclosed a limited number of IP addresses.” Furthermore, RestoreCord challenges the significance of certain data points mentioned in the leak, asserting that the IP addresses involved are “randomly generated IPs rather than actual user information.” This distinction is crucial for understanding the potential impact of the leak on users.
The organization further contests the scale of the leak, asserting that fewer than 5,000 IP addresses were compromised, which is significantly less than what was initially suggested. This discrepancy in reported figures emphasizes the importance of verifying data breach claims before drawing conclusions.
Moreover, with this new insight, Mashable discovered that the “Restorecord 840K Records Database” file, which contains the compromised data, had been previously shared on other hacking forums last year. This historical context raises concerns about the ongoing safety of user data and the implications of such a breach.
Nonetheless, the data leak has resurfaced today on BreachForums, reminding Discord users who might have been impacted by the breach to stay vigilant in monitoring their accounts and securing their personal information to prevent any potential misuse.
The original article is presented below.
Stay Updated with Mashable Light Speed
In a shocking turn of events, nearly one million Discord users have had their account details—including usernames, IP addresses, and Discord IDs—exposed on a notorious hacking forum. This alarming breach highlights the vulnerabilities associated with third-party services.
Interestingly, while the popular chat service Discord itself does not seem to have experienced a direct data breach, the incident stems from a compromise of a third-party backup solution called RestoreCord. This situation raises critical questions about the security measures in place for auxiliary services that interact with major platforms.
The breach was first identified by cybersecurity platform Leakd, which reported that a file containing a significant amount of Discord user data was made publicly available on the renowned hacking site known as BreachForums. The compromised data, which encompasses Discord IDs, IP addresses, and usernames, was shared by a BreachForums user identified as “Sythe.” This revelation underscores the ongoing threats posed by cybercriminals targeting user data.
RestoreCord serves as a backup solution for Discord users, claiming on its website to be “the only Discord Bot that you will ever need to protect and recover your server from raids, nukes, and more.” With a user base of 99 million members, including 100,000 paying subscribers, RestoreCord is responsible for backing up 55,000 Discord servers. This large scale of operations makes security imperative, especially given the recent breach.
Last year, the FBI seized BreachForums after it gained notoriety as a marketplace for trading stolen data. However, just a few weeks after the May 2024 takedown, one of BreachForums’ domains resurfaced, indicating the persistent nature of cyber threats in the digital landscape.
The founder of BreachForums, Conor Fitzpatrick, was arrested in 2023 on multiple charges linked to the site. Recently, Fitzpatrick made headlines again when a U.S. appeals court overturned the lenient sentence he initially received, adding another layer of complexity to the ongoing saga of cybersecurity and legal accountability.
As of the time of this publication, it remains unclear how the data was acquired or if any malicious activities are directly associated with the leaked information. Mashable has reached out to RestoreCord for further clarification and will provide updates once more information becomes available.
var facebookPixelLoaded = false;
window.addEventListener(‘load’, function(){
document.addEventListener(‘scroll’, facebookPixelScript);
document.addEventListener(‘mousemove’, facebookPixelScript);
})
function facebookPixelScript() {
if (!facebookPixelLoaded) {
facebookPixelLoaded = true;
document.removeEventListener(‘scroll’, facebookPixelScript);
document.removeEventListener(‘mousemove’, facebookPixelScript);
!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;
n.push=n;n.loaded=!0;n.version=’2.0′;n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,
document,’script’,’//connect.facebook.net/en_US/fbevents.js’);
fbq(‘init’, ‘1453039084979896’);
fbq(‘track’, “PageView”);
}
}
Ethan Carter
