• Using harvested data to intimidate users
• Silencing anyone who talks about the leak
• Operating multiple bots as one data-collection network
This is beyond a TOS violation — it’s a security threat.
• Using harvested data to intimidate users
• Silencing anyone who talks about the leak
• Operating multiple bots as one data-collection network
This is beyond a TOS violation — it’s a security threat.
• Data collection has been ongoing for 5+ years
• Emails were stored for years
• The system was “removed” only after enough data was harvested
• Users interacting with voting/verification bots unknowingly had their email logged
This isn’t a bug — it’s an organized operation.
• Data collection has been ongoing for 5+ years
• Emails were stored for years
• The system was “removed” only after enough data was harvested
• Users interacting with voting/verification bots unknowingly had their email logged
This isn’t a bug — it’s an organized operation.
• IP address
• Server list
• Connected accounts
This confirms a data leak service built on top of the stolen data.
• IP address
• Server list
• Connected accounts
This confirms a data leak service built on top of the stolen data.
“124M SQL records… mails & IPs come from our verify apps everywhere… I’m selling this application.”
They literally acknowledge collecting & selling Discord user data.
“124M SQL records… mails & IPs come from our verify apps everywhere… I’m selling this application.”
They literally acknowledge collecting & selling Discord user data.
• Emails
• IP addresses
• Server lists
• Third-party account connections (GitHub, Twitch, Spotify, Riot…)
• Profile metadata
• OAuth tokens & traces
• Logs going back years
None of this is available through the Discord API.
• Emails
• IP addresses
• Server lists
• Third-party account connections (GitHub, Twitch, Spotify, Riot…)
• Profile metadata
• OAuth tokens & traces
• Logs going back years
None of this is available through the Discord API.