Connect with us

Technology

Discord confirms vendor breach exposed user IDs in ransom plot

Published

on

Discord confirms vendor breach exposed user IDs in ransom plot

NEWYou can now listen to Fox News articles!

In 2025, it feels like cybercriminals are winning while the world’s biggest data hoarders are losing. One by one, global giants are admitting they’ve been breached, from tech powerhouses like Google to insurance leaders such as Allianz and Farmers and even luxury brands like Dior. The latest company to report a breach is Discord. The popular chat platform confirmed that hackers gained access to a third-party customer support provider, 5CA, exposing user data including names, email addresses, limited billing details and even government ID images.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

MAJOR COMPANIES, INCLUDING GOOGLE AND DIOR, HIT BY MASSIVE SALESFORCE DATA BREACH

Hackers hit Discord’s support vendor, exposing sensitive user data worldwide. (Phil Barker/Future Publishing via Getty Images)

Advertisement

How the breach happened and what data was exposed

The company confirmed that the breach, which occurred on September 20, did not involve a direct attack on Discord’s servers. Instead, attackers gained unauthorized access to 5CA, one of Discord’s third-party customer service providers. This allowed them to view information from users who had reached out to Discord’s Customer Support or Trust & Safety teams.

Discord is a chat app primarily used by gamers, but it has expanded to various other communities, enabling text messages, voice chats and video calls. Some even use it as a replacement for Slack. The platform currently has a monthly user base of over 200 million. The data exposed included Discord usernames, real names, emails, limited billing details such as payment type and the last four digits of credit cards, IP addresses and messages exchanged with customer service agents. In some cases, government ID images provided for age verification were also compromised. Discord estimates that around 70,000 users globally may have had government ID photos exposed.

Reports suggest the attackers attempted to use this access to demand a ransom from Discord. Bleeping Computer reported that the Scattered Lapsus$ Hunters (SLH) threat group claimed responsibility for the attack earlier this month. This is the same group that claims to have access to over a billion Salesforce records and is demanding ransom for those as well.

JEEP AND CHRYSLER PARENT STELLANTIS CONFIRMS DATA BREACH

About 70,000 users had ID images stolen in the latest third-party data breach. (Tiffany Hagler-Geard/Bloomberg via Getty Images)

Advertisement

What Discord is doing now and what users should do next

Discord disclosed the incident 13 days later, on October 3. Since then, it has cut off the third-party support provider’s access, launched an internal investigation with a digital forensics team and started informing affected users. It also clarified that any communication about the breach will come only from noreply@discord.com and that it will never contact users by phone regarding this incident. The company added that some data remained safe: full credit card numbers, CCV codes, account passwords and activity outside of customer support conversations were not exposed.

Discord also stated that it has notified relevant data-protection authorities about the breach, is working closely with law enforcement and is auditing its third-party vendors to ensure they meet its enhanced security and privacy standards going forward.

A representative at Discord issued a statement, saying in part, “We want to address inaccurate claims by those responsible that are circulating online. First, as stated in our blog post, this was not a breach of Discord, but rather a third-party service we use to support our customer service efforts. Second, the numbers being shared are incorrect and part of an attempt to extort a payment from Discord. Of the accounts impacted globally, we have identified approximately 70,000 users that may have had government-ID photos exposed, which our vendor used to review age-related appeals. Third, we will not reward those responsible for their illegal actions. All affected users globally have been contacted, and we continue to work closely with law enforcement, data protection authorities and external security experts. We’ve secured the affected systems and ended work with the compromised vendor. We take our responsibility to protect your personal data seriously and understand the concern this may cause.”

Discord cuts ties with vendor 5CA and tightens its security investigations. (Kurt “CyberGuy” Knutsson)

6 steps you can take to stay safe after the Discord breach

If you think your details might have leaked in the Discord data breach, below are some steps you can take to stay protected.

Advertisement

1) Enable two-factor authentication

Two-factor authentication (2FA) adds an extra verification step when logging in, making it much harder for attackers to access your account even if they have your password. Discord supports 2FA via authenticator apps or SMS. Once enabled, you’ll receive a code each time you log in from a new device. This simple step can prevent account takeovers and gives you peace of mind.

2) Consider a personal data removal service

The less information available about you, the harder it is for attackers to target you. Review what personal details you’ve shared online, and remove unnecessary data from websites and apps. A personal data removal service can help scrub your information from data broker sites, making it more difficult for attackers to connect the dots and launch identity theft or phishing attacks.

While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Advertisement

3) Use strong, unique passwords for all accounts

Reusing passwords across platforms makes it easy for attackers to access multiple accounts if one password is compromised. A password manager can generate long, complex passwords and store them securely, so you don’t have to remember them all. This not only protects your Discord account but also your email, banking and other online services.

Next, see if your email has been exposed in past breaches. Our #1 password manager (see Cyberguy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords, and secure those accounts with new, unique credentials. 

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com

4) Monitor accounts for suspicious activity

Even if you don’t see immediate signs of compromise, attackers can try to exploit stolen data later. Regularly check your email and Discord login history for unusual sign-ins. Services like identity theft protection can scan the dark web for your credentials and alert you immediately if they appear, helping you react quickly before serious damage occurs.

Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. 

Advertisement

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.

5) Be cautious with emails, messages or links, and use strong antivirus software

Phishing attacks often spike after breaches. Attackers may send messages that look like official notifications asking you to reset your password or provide personal information. Always verify the sender, avoid clicking unknown links, and never share sensitive info. Treat every unexpected message as suspicious, even if it appears to come from Discord or another trusted service.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com. 

6) Keep devices and software up to date

Attackers often exploit outdated software and known vulnerabilities. Ensure your operating system, apps and antivirus software are current.

Advertisement

 

Kurt’s key takeaway

If the recent breaches are any indication, third-party services that companies rely on are often the weakest link in cybersecurity. Discord’s steps to contain the situation are necessary, but they highlight a bigger problem. Many companies do not implement sufficient safeguards to protect sensitive user data. Weak oversight of third-party providers, delayed responses and inadequate security policies leave personal information exposed and vulnerable to attackers.

Should companies be held more accountable for breaches caused by third-party providers? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Advertisement

Copyright 2025 CyberGuy.com. All rights reserved.

Technology

Roland’s Go:Mixer Studio turns your phone into a mobile music studio

Published

on

Roland’s Go:Mixer Studio turns your phone into a mobile music studio

Roland now offers a more capable audio mixer for phones and tablets with the launch of the Go:Mixer Studio. The Go:Mixer audio interface lineup has always been a bit limited, better suited for scrappy live streams and capturing quick demos on their phones than professional recording. The Go:Mixer Studio is an attempt to actually reach that lofty goal, with more inputs and outputs, built-in effects, and up to 24-bit / 192kHz audio. There’s even an iOS app that allows you to capture video and multitrack audio simultaneously.

Streaming and social video are still the major use cases here. The Go:Mixer Studio can even be mounted on a mic stand so you can keep it in easy reach during a live session. The screen and knobs allow you to control all the parameters on the Go:Mixer Studio directly, but there’s also a desktop app for Windows and MacOS that gives you complete control of the mixer remotely.

There’s plenty of connectivity, including two XLR inputs on the back with phantom power, a 1/4-inch instrument input for directly connecting a guitar or bass, stereo 1/4-inch line-in jacks, and an aux input. There’s also 1/8-inch TRS MIDI in and out, two headphone jacks, and stereo line outs for connecting to studio monitors. Each audio input has a dedicated EQ and compressor on the channel. The XLR and instrument ins also have reverb available.

The Go:Mixer Studio is available now for $299.

Continue Reading

Technology

Alexa.com brings Alexa+ to your browser

Published

on

Alexa.com brings Alexa+ to your browser

NEWYou can now listen to Fox News articles!

For years, Alexa mostly stayed in one place. It lived on kitchen counters, nightstands or living room shelves. That setup worked for music and timers, but it also limited when and how people could actually use the assistant. Now that is changing.

Amazon has rolled out Alexa.com, which brings Alexa+ directly to your web browser for Early Access users. Instead of relying on a speaker or phone, you can now open a laptop and start using Alexa like any other web-based AI tool.

This shift is less about new tricks and more about access. Alexa can now follow you throughout your day instead of waiting for you at home.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

CHATGPT HEALTH PROMISES PRIVACY FOR HEALTH CONVERSATIONS

Amazon’s Alexa is no longer tied to a smart speaker, with Alexa.com bringing the assistant and Alexa+ directly to the web browser for Early Access users. (Photo Illustration by Thomas Fuller/SOPA Images/LightRocket via Getty Images)

What Alexa.com actually is

Alexa.com is the browser-based version of Alexa+. You can type questions, explore topics, plan trips, organize tasks, or create content without touching a smart speaker. The biggest difference is continuity. Alexa keeps context across devices, so conversations carry over whether you are on your laptop, phone, Echo, or Fire TV. You do not have to repeat yourself every time you switch screens. That makes Alexa feel less like a command tool and more like an assistant that remembers what you are working on.

Who can use Alexa.com right now

Alexa.com is not open to everyone yet. To use it, you need:

  • Alexa+ Early Access
  • An Amazon account linked to a compatible Echo, Fire TV, or Fire tablet
  • US-based Amazon account
  • Device language set to English, United States

Child profiles are not supported on the browser version. Older Echo devices will continue using the original Alexa.

What Alexa.com cannot do yet

Because Alexa.com is still in Early Access, it has limits that matter for everyday users. Right now:

Advertisement
  • You can only type to Alexa in your browser
  • Voice interaction is not supported on the web
  • Music playback is not available
  • Smart home controls are limited compared to Echo devices

Amazon says features will roll out gradually. Alexa.com is meant to complement your devices, not fully replace them yet.

Meal planning without juggling tabs

One area where Alexa.com feels genuinely useful is meal planning. You can ask Alexa for a full week of meals and set preferences like high protein, low sugar, or kid-friendly lunches. Alexa generates a plan and turns it into a shopping list. From there, items can be added directly to Amazon Fresh or Whole Foods. Instead of bouncing between recipes, notes and carts, everything happens in one place.

Organizing everyday life in one place

Alexa.com also works as a lightweight life organizer. You can upload documents, emails and images so Alexa can pull out key details. That includes appointments, reminders and schedules you would otherwise forget. Instead of searching your inbox, you can ask Alexa when the dog last went to the vet or what time practice starts tonight. The information stays available across devices.

Smart home access, with limits

Alexa.com keeps your smart home controls visible next to your chat window. While full smart home control is still limited in the browser, Alexa.com lets you check status, review activity and continue actions on your Echo or Fire TV devices. It is most useful as a bridge. You can start something in the browser and finish it at home without starting over.

Recipes that follow you into the kitchen

Alexa.com also simplifies cooking. If you find a recipe online, you can paste the link into Alexa and ask it to adjust for dietary needs. Alexa can save it, convert it into ingredients and add everything to your shopping list. When it is time to cook, Alexa can pull the recipe up on your Echo Show, guide you step by step and manage timers so your hands stay free.

5 TECH TERMS THAT SHAPE YOUR ONLINE PRIVACY

Advertisement

Alexa.com lets users type questions, plan trips, organize tasks and create content without relying on an Echo or smartphone. (Michael Nagle/Bloomberg via Getty Images)

Finding something to watch faster

Decision fatigue hits hard at night. On Alexa.com, you can explore movie themes, get recommendations and save picks for later. When you sit down, Alexa remembers your choices and sends them to your Fire TV. That cuts down on scrolling and family debates.

What about privacy

Using Alexa on the web raises natural privacy questions. Amazon says Alexa+ includes built-in protections and user controls. Still, it is worth taking a minute to review your settings, especially if you plan to upload documents or personal information. A few smart habits can help:

  • Check your Alexa privacy settings and review stored activity
  • Avoid uploading sensitive documents like IDs or medical records
  • Use strong antivirus software to protect your device. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

As with any AI assistant, convenience comes with trade-offs. Staying aware helps you stay in control.

How much Alexa+ will cost

Alexa+ is free during Early Access. When Early Access ends, you will not be automatically charged. After that:

  • Alexa+ stays free with a Prime membership
  • Non-Prime users can subscribe for $19.99 per month

This makes Alexa.com more appealing for Prime members and a tougher sell for everyone else.

What this means to you

For most people, Alexa.com is about convenience. If you already use Alexa at home, the web version makes it easier to use during the day. You can plan, organize or look things up from your computer and then pick up later on your phone or Echo. It also puts Alexa in the same category as other browser-based AI tools, but with deeper ties to shopping, smart home features and entertainment. Whether you stick with it will likely come down to how often you want Alexa to help you during your day.

Advertisement

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

YOU CAN FINALLY CHANGE YOUR GMAIL ADDRESS WITHOUT LOSING DATA

Amazon says Alexa.com allows conversations to carry over across devices, giving users continuity between laptops, phones and smart home screens. (Photographer: Michael Nagle/Bloomberg via Getty Images)

Kurt’s key takeaways

Alexa.com does not reinvent Alexa. It simply makes it easier to use where people already spend time. By bringing Alexa+ to the browser, Amazon is betting that continuity matters more than novelty. For some users, that will be enough to make Alexa feel relevant again.

Advertisement

If Alexa followed you from your laptop to your living room, would you actually rely on it more, or would it still feel optional? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com.  All rights reserved.

Advertisement
Continue Reading

Technology

A second US Sphere could come to Maryland

Published

on

A second US Sphere could come to Maryland

The second US sphere would be built in an area known as National Harbor in Prince George’s County, Maryland. Located along the Potomac River, National Harbor currently features a convention center, multiple hotels, restaurants, and shops. While Abu Dhabi plans to build a sphere as large as the one in Las Vegas, the National Harbor venue would be one of the first mini-Sphere venues announced last March.

Its capacity would be limited to 6,000 seats instead of over 17,000. But the smaller Sphere would still be hard to miss with an exterior LED exosphere for showcasing the “artistic and branded content” that helped make the original sphere a unique part of the Las Vegas skyline.

The inside of the mini-Sphere will feature a high-resolution 16,000 by 16,000 pixel wrap-around screen, the company’s immersive sound technology, haptic seating, and “4D environmental effects.” For the AI-enhanced version of The Wizard of Oz currently playing in Las Vegas, audiences experience effects like wind, fog, smells, and apples falling from the ceiling.

The mini-Sphere will potentially also be cheaper to build than the $2.3 billion original, but its construction is contingent on the “receipt of certain governmental incentives and approvals from Prince George’s County and the State of Maryland.” Sphere Entertainment says the project “would utilize a combination of public and private funding, including approximately $200 million in state, local, and private incentives,” but would potentially generate millions of dollars in revenue for the country and state while supporting over 4,700 jobs once it opens.

Continue Reading
Advertisement

Trending