DISCORD DATA SHOWS PLATFORM KNEW TEEN'S REAL AGE
INDUSTRY DESK■ 1 MIN READ
SAT, MAY 9, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
A father attempting to resolve his teen's account issues discovered that Discord had access to age verification data contradicting the false age listed on the profile. The revelation emerged from a data dump following a security incident.
The parent contacted Discord support after their teenager initially misrepresented their age during account creation. Throughout the support process, the company failed to acknowledge possessing accurate age information, according to the father's account.
Data from the breach confirmed Discord's systems contained the teen's correct age prior to the security incident. This suggests the platform had age verification mechanisms in place but did not cross-reference them during the support interaction.
The incident highlights a disconnect between Discord's data collection practices and its customer service operations. While the platform collects age information—potentially through payment methods, phone verification, or other means—support teams may not have access to or regularly consult this data when handling account matters.
Discord's terms of service require users to be at least 13 years old. The company has not publicly commented on the specifics of this case or how age verification data is utilized across its support systems.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
MAY 29— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
MAY 29— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
MAY 29— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
MAY 29— Security Desk