Discord · Breach

Threat actor claims archive of 10M Discord profile histories

Nov 04, 2026 · 1 min read

A threat actor claims on a dark web forum to hold a "database engine" of histories for more than 10 million Discord profiles: past usernames and display names, avatars, banners and per-account changes. The post does not explain the data's origin, DailyDarkWeb assesses such archives usually come from public scraping or third-party logging bots, and Discord has not confirmed an incident. Treat messages citing this history as social engineering attempts.

By HIFY Radar newsroom Updated 11/04/2026 06:51 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor advertises on a dark web forum a lookup mechanism holding historical profile data for more than 10 million Discord users, according to DailyDarkWeb. The package includes past usernames and display names, avatar and banner history, and per-account profile changes. Discord has not confirmed any incident and the claim is unverified.

Why it matters

Even with no confirmed Discord breach, profile history lookups let buyers track people who changed names for privacy and create doxxing risk, DailyDarkWeb assesses. The material feeds targeted scams against employees using the platform.

What to do

Warn staff about messages citing old usernames, avatars or banners as proof of identity. Review current and past profiles tied to the brand and remove data that should not stay public.

For the technical team

Affected: Discord; arquivo alegado de históricos de perfis de mais de 10 milhões de usuários, oferecido como mecanismo de consulta · Discord users. The actor claims coverage of more than 10 million profiles; the number is unverified.
Exploitation: Advertisement on a dark web forum reported by DailyDarkWeb. No technical exploitation. Discord has not confirmed any incident; classified as an unverified threat-actor claim.
Fix: No fix to apply; the source does not indicate a Discord breach. Stated mitigation: treat profile history lookups as a doxxing and social engineering risk.
Vector: No software flaw. The post does not state the data's origin; DailyDarkWeb's analysis says such archives are usually built by scraping public profile data or pulling from third-party logging bots, with no breach of Discord itself.
More details: The actor calls the offer a "database engine" and says buyers can look up past changes on specific accounts. Alleged contents: past usernames and display names, avatar and banner image history, per-account profile change history. DailyDarkWeb assesses a real risk of doxxing and of tracking people who changed names to stay private.