We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Advertising Disclosure

vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

Discord.io Breached, Data of 760K Users Exposed

Discord.io Breached, Data of 760K Users Exposed
Zane Kennedy Published on 20th August 2023 Cybersecurity Researcher

Discord.io has fallen victim to a severe data breach that resulted in the exposure of sensitive information belonging to approximately 760,000 users. Discord.io, distinct from the official Discord platform, allows server owners to create customized invites for their communities.

The breach was first detected on the night of August 14th, when unidentified attackers infiltrated Discord.io's systems and stole all user data from the service. “Akhirah”, the self-proclaimed instigator of the breach, proceeded to offer the complete database for sale on Breached, a cybercrime forum known as a marketplace for stolen data. The threat actor also showcased a small subset of the stolen data as proof.

The pilfered dataset contains a wide range of user information. Notably, usernames, email addresses, and Discord IDs were exposed — in select instances, salted and hashed passwords were also compromised. Although Discord.io emphasized that Discord authentication tokens remained untouched, the stolen information could still be used for phishing attacks in an effort to gain more data.

Discord.io promptly responded to the breach by suspending all operations and services. The organization has initiated a comprehensive investigation to ascertain the breach's origins, which preliminary findings attribute to a vulnerability in the website's code.

In an effort to fortify its security landscape, Discord.io has pledged to conduct a comprehensive overhaul of its security measures and a complete reimagining of the website's underlying codebase.

As the service has been temporarily taken down, all active subscriptions to Discord.io have been canceled. Users who subscribed within the last month will receive full refunds.

In an interview with BleepingComputer, Akhirah alleged that the breach wasn’t only motivated by monetary gain, but also in response to how the service allegedly links to illegal and harmful content. He stated “"It's not just about money, some of the servers they overlook are talking about pedophilia and similar things, they should blacklist them and not allow them".

Users are advised to monitor the platform's official website for updates regarding potential password resets and other security-related notifications.

About the Author

Zane is a Cybersecurity Researcher and Writer at vpnMentor. His extensive experience in the tech and cybersecurity industries provides readers with accurate and trustworthy news stories and articles. He aims to help individuals protect themselves through informative content and awareness of cybersecurity's crucial role in today's digital landscape.