5CA, a customer service company that works with Discord, has denied being the source of a recent data breach that may have exposed 70,000 users’ government ID photos.
The company issued a statement on its website claiming it was “not hacked,” despite Discord’s earlier comments linking the incident to one of its third-party vendors.
Discord previously said the breach affected a “limited number of users” who had interacted with its Customer Support or Trust & Safety teams. According to the company, approximately 70,000 users worldwide may have had their government ID photos exposed. The chat platform clarified that “this was not a breach of Discord, but rather a breach of a third-party service provider, 5CA, that we used to support our customer service efforts.”
In response, 5CA released its own statement disputing the reports. The company emphasized that none of its systems were compromised and that it has not handled any government-issued IDs for Discord.
“Contrary to these reports, we can confirm that none of 5CA’s systems were involved, and 5CA has not handled any government-issued IDs for this client,” the company said. “All our platforms and systems remain secure, and client data continues to be protected under strict data protection and security controls.”
5CA said it is conducting a forensic investigation with the help of cybersecurity experts and ethical hackers. Early findings indicate that the incident occurred outside of its systems, and there is no evidence suggesting other clients or data were affected. The company added that all access controls, encryption, and monitoring systems remain fully operational but are now under “heightened review” as a precaution.
The firm also noted that preliminary information points to “human error” as a possible factor, though the extent of it remains under investigation. 5CA said it continues to work closely with Discord and external advisors and will share verified findings once the investigation concludes.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Meanwhile, questions remain about which company handled the government ID photos and how the data was accessed. Both Discord and 5CA have been asked to clarify their roles and responsibilities in the incident.
