Customer service support company behind Discord breach says it wasn’t hacked

Curiouser and curiouser.

5CA, the customer service support company that Discord says was hacked for the personal identification of approximately 70,000 users, has issued a statement contradicting Discord’s claims.

“We are aware of media reports naming 5CA as the cause of a data breach involving one of our clients,” reads the statement. “Contrary to these reports, we can confirm that none of 5CA’s systems were involved, and 5CA has not handled any government-issued IDs for this client. All our platforms and systems remain secure, and client data continues to be protected under strict data protection and security controls.

“We are conducting an ongoing forensic investigation into the matter and collaborating closely with our client, as well as external advisors, including cybersecurity experts and ethical hackers. Based on interim findings, we can confirm that the incident occurred outside of our systems and that 5CA was not hacked. There is no evidence of any impact on other 5CA clients, systems, or data. Access controls, encryption, and monitoring systems are fully operational and, as a precautionary measure, are under heightened review.”

Nonetheless, the statement doesn’t contradict the fact that government-issued ID belonging to 70,000 Discord users is now in the hands of bad actors.

“Our preliminary information suggests the incident may have resulted from human error, the extent of which is still under investigation,” 5CA continued. “We remain in close contact with all relevant parties and will share verified findings once confirmed.”

We approached Discord for further comment on our 10 October story, but have not heard back from the company as yet.

We’ll let you know when more information is provided. Once again, let this be a lesson to us to not be so trusting of corporations when asked to scan and upload sensitive personal information.