Discord disclosed a 2025 data breach via third-party vendor 5CA, exposing emails, names, billing info, chat histories, and IDs for up to 5.5 million users in a supply-chain attack. The company advised precautions and refused ransom demands. This incident underscores the risks of outsourcing sensitive operations and calls for enhanced vendor security.