The third-party service is not an official Discord website, but allows server owners to create custom invites to their Discord channels. Discord.io added that it has canceled all active subscriptions and will be reaching out to individual members as soon as possible. Providing an update on August 15, the company revealed it believes the breach was caused by a vulnerability on its website’s code, allowing the attacker to gain access to the member database. “The attacker then proceeded to download the entire database, and put it up for sale on a third-party site,” read the post.
