Discord Class Action Lawsuit Claims Data Breach Compromised User Personal Information

Millions of U.S. customers had their personal information accessed in a Discord data breach, which the company discovered earlier this month.

A Florida man has filed a class action lawsuit accusing Discord of failing to meet industry standards for safeguarding users’ sensitive personal information.

The complaint (PDF) was brought by Thong Nguyen in the U.S. District Court for the Northern District of California on October 13, naming Discord Inc. as the sole defendant.

Discord is a free chat platform that supports voice, video and text communication, allowing people to gather in public or private groups known as “servers.” While it first gained traction among gamers, it has since expanded to include communities focused on art, education, work and other shared interests. Users can join existing servers or set up their own, organizing discussions through dedicated voice and text channels.

However, the platform has come under scrutiny in recent months due to its connection with a number of Roblox lawsuits being filed over child sexual exploitation. These lawsuits allege that child predators who initially make contact with their victims through the Roblox online gaming platform, often move their conversations to platforms like Discord or Instagram, where they continue the grooming and sextortion of minors.

As the number of Roblox sexual exploitation lawsuits continues to increase, more and more parents are coming forward claiming that Roblox, Discord and other platforms have failed to protect minors by not implementing and enforcing adequate safety measures, which has led to in-person assaults, sextortion, explicit image exchange and severe psychological harm for their children.

In his lawsuit, Nguyen claims that millions of Discord users had their personal information exposed during a data breach discovered on October 3, 2025.

The incident reportedly occurred after one of Discord’s third-party customer service vendors was compromised, allowing an unauthorized party to access user data. According to the complaint, the breach may have exposed:

• Names
• Usernames
• IP addresses
• Purchase history
• Payment methods
• And the last four digits of users’ credit cards

While Discord publicly acknowledged the breach in an online notice, the lawsuit contends the company failed to disclose key details about the cause, scope or remedial measures taken to prevent future incidents.

Nguyen claims the breach could have been prevented if Discord had implemented basic security measures recommended by the FBI and Microsoft, such as encryption, multi-factor authentication, firewall protections and employee training.

The lawsuit further accuses Discord of violating Federal Trade Commission (FTC) data protection guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework, which establish minimum safeguards for companies handling personal information.

In addition, Discord allegedly failed to monitor its third-party vendors, encrypt sensitive data or purge old user records, despite assurances to customers that it maintained strict confidentiality and would delete unnecessary personal data.

“Defendant knowingly obtained sensitive PII and had a resulting duty to securely maintain that information in confidence. Plaintiff and Class Members would not have provided their PII to Defendant if they had known that Defendant would not ensure that it used adequate security measures.”

— Thong Nguyen v. Discord Inc.

Nguyen raises allegations of negligence, negligence per se, breach of express contract and unjust enrichment.

He is seeking class action certification for his complaint, in addition to injunctive and declaratory relief that would compel the company to strengthen its cybersecurity infrastructure, undergo regular third-party security audits, and establish firm data retention and deletion policies to prevent similar breaches in the future.

Roblox Sexual Exploitation Lawsuits

Amid the data breach controversy, Discord currently faces scrutiny for its role in a growing number of Roblox sexual exploitation lawsuits, which have been brought nationwide, alleging that Roblox and other online platforms have failed to protect children from assaults, sextortion and various forms of psychological abuse by sexual predators.

In one instance, a wrongful death lawsuit filed in California earlier this month, claims a 15-year-old boy took his own life after being groomed and blackmailed by a predator on Roblox and Discord.

This complaint was one of the first to directly link sextortion on Roblox and Discord to a child’s suicide. With a multitude of similar claims pending nationwide, a motion has been brought before the U.S. Judicial Panel on Multidistrict Litigation (JPML) to consolidate all Roblox child exploitation lawsuits into an MDL, or multidistrict litigation centered in the Northern District of California.

If the JPML decides to centralize the cases, they will be coordinated before a single federal judge for pretrial proceedings, with each lawsuit continuing as an individual claim. Should the parties fail to reach a resolution or Roblox settlement during that process, the cases would be sent back to their original courts for separate trials.

Families who believe they or their children were harmed through Roblox can request a free, confidential case review to determine eligibility for a lawsuit or potential settlement. Roblox lawyers handling these claims work on a contingency basis, meaning clients do not pay any fees or costs unless compensation is recovered.

Sign up for more legal news that could affect you or your family.