Nearly 800,000 RestoreCord Users Exposed in Discord Data Breach

HEROIC analysts found a dataset tied to RestoreCord, a US-based Discord recovery service that helps users back up and restore servers after raids, nukes, or data loss, circulating on a Telegram channel dated February 1, 2024. The breach affected 796,033 users, exposing usernames and IP addresses tied to their Discord activity. No passwords were included in this leak, but the data still carries real risk for the people caught in it.

Why the RestoreCord Breach Is Dangerous

An IP address paired with a username can be used to figure out roughly where someone lives, identify their internet provider, and in some cases connect an anonymous online identity to a real person. For a service built around protecting Discord communities from raids, this kind of exposure hands attackers exactly the information needed to target individual users directly, whether through harassment, doxxing, or more focused network-based attacks.

What the RestoreCord Breach Exposed

• Usernames
• IP addresses

Why This Matters

Even without passwords in this leak, exposed usernames and IP addresses feed directly into identity theft and social engineering attempts, since attackers can combine this data with information from other breaches to build a fuller profile of a target. For the 796,033 people affected, that means a real risk of being personally targeted, tracked, or impersonated, even if no account credentials were stolen this time.

How a Database Breach Like RestoreCord Happens

This incident is classified as a database breach, meaning an attacker gained direct access to RestoreCord's user records, likely through a software vulnerability or a compromised administrative account. Once extracted, the usernames and IP addresses were shared on a Telegram channel, where anyone could download the dataset and use it to identify or target the individuals inside it.

Check If You Are Affected

If you have ever used RestoreCord to protect a Discord server, it is worth staying alert to unusual contact or targeting tied to your username. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including this one, so you can quickly find out whether your information has been exposed.