Cyber news, tools & one smart career path.
5 min read
Quick Reality Check
Age-verification company exposes Discord users’ ID photos
What happened:
A company that verified ages for Discord was hacked, exposing personal data for about 70,000 users. The stolen information includes uploaded government IDs, names, email addresses, and IP data from support cases. The hacker is now attempting to extort the company by threatening to leak the files. Discord says the breach came from a third-party vendor, not its own systems.
Why it matters:
Your ID photo is a gateway to your identity. Once it is exposed, scammers can use it to create fake profiles, trick verification systems, or train deepfake models that look like you. When platforms outsource identity checks, your information often lives on multiple servers, creating more entry points for attackers. It is another reminder to think twice before uploading government IDs or facial scans unless it is absolutely necessary
Read more, here
60-Second Protection Fix
Here is what to do right now to protect yourself
What you can do:
- Only verify your ID with trusted, well-known providers.
- Watch for fake accounts or messages pretending to be you.
- If your ID is exposed, monitor for identity theft and consider a credit freeze.
- Enable multi-factor authentication on all accounts tied to your name or email.
- Consider a trusted data deletion service like Incogni to remove your info from data broker sites. Use code CSG60 for 60% off.
Must-Have Tool:
When breaches expose personal data like ID photos, names, or emails, it doesn’t just end up on the dark web. It also ends up on people-search and data broker sites. Incogni deletes your personal data from those sites automatically and keeps sending new removal requests on your behalf. You also get monthly progress updates.
If you want to try it out, click here and use code CSG60 for 60% off.
Check Out Digital Forensics (aka “The Cyber Detectives”)
These teams are the first to respond when a breach hits. They collect evidence, trace how attackers got in, and help restore systems safely. When a third-party service like an ID verification vendor is compromised, these experts uncover what was taken, how it spread, and how to prevent it from happening again. If you like solving puzzles under pressure and turning chaos into clear answers, this could be your path.
Learn more about Digital Forensics in my Free Intro Course: Cyber Paths 101
What You Missed This Week
12 things cybersecurity and privacy experts never do online (but most people do). Click on the image or watch here
What We're Hearing From You!
"A safe word is a code word to actually say when one isn't safe?" - @maximilian_and_brindley
Yes, or a word that you say to confirm that you are who you claim to be on the phone. For example, if my family’s safe word was “apples”, and my mom got a call from someone claiming to be me but they didn’t say “apples,” she’d know it’s not me.
Let’s keep building together!
Stay protected,
Cybersecurity Girl
Know someone who’d enjoy this? Pass it along and have them sign-up here! And if you have thoughts or feedback, just hit reply, I’d love to hear from you.
Responses