Discord Lawsuit: A Data Breach Class Action and a Wave of Child-Safety Suits
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
“Discord lawsuit” means several different cases. If Discord emailed you in October 2025 about a breach at its customer-service vendor 5CA, you may be in a federal class action in San Francisco. Separately, Texas, Nevada and other states have sued over child safety, and Texas has already won a court order forcing new safety defaults. As of October 5, 2026 there is no Discord settlement, no fund and no claim form.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuits Say
The data breach case. On October 3, 2025 Discord disclosed that an unauthorized party had compromised 5CA, a third-party vendor it used for customer support. Discord said about 70,000 users may have had government-ID photos exposed — images its vendor used to review age-related appeals — along with names, usernames, emails, IP addresses, support messages and limited billing data such as the last four digits of a card. Discord said the attacker wanted a ransom. The class action alleges Discord failed to properly secure and safeguard that information.
The child-safety cases. State attorneys general allege Discord let adults reach children too easily — weak age checks, friend requests and direct messages open to strangers by default — while marketing the app to parents as “safe by design.” Discord disputes this; it says the lawsuits do not reflect the platform it has built or its investment in safety, and that roughly 80% of its users are adults.
Case Details
Data breach class action: Uceta v. Discord, Inc., No. 3:25-cv-08582, U.S. District Court for the Northern District of California, filed October 7, 2025 (original complaint). Discord’s own incident notice is the primary account of the breach.
Texas: State of Texas v. Discord, Inc., filed May 22, 2026 in Collin County state district court under the Texas Deceptive Trade Practices Act and the SCOPE Act. Nevada: filed in May 2026 under the Nevada Deceptive Trade Practices Act. New Jersey’s suit dates from April 17, 2025; Indiana and Arkansas have also sued. Brazil: the federal government filed a $97 million suit in August 2026. State and foreign government suits seek penalties and platform changes, not payments to users.
Status: Active Cases, No Settlement
The most concrete result so far is in Texas. A court signed a temporary restraining order the day Texas sued, and on July 24, 2026 the Texas Attorney General announced an agreed temporary injunction after a two-day hearing. It gives Discord 90 days to give every Texas user the age-assurance and default safety settings it uses in the United Kingdom, requires progress reports every 30 days, and binds Discord until final judgment. That is a safety order, not money for users; Texas says the case now proceeds to trial on civil penalties.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Am I Affected?
Data breach case: the proposed class is people whose information was exposed in the 5CA incident — in practice, users who had contacted Discord Customer Support or Trust & Safety. Discord said affected users would get an email from noreply@discord.com, and that the email states whether your ID image may have been accessed. Keep that email. You do not need to sign up anywhere; if a settlement is ever approved, class members are notified by a court-appointed administrator.
Child-safety cases: the state suits are brought by the government, not on behalf of individual users, so there is nothing to join. Families with an individual abuse claim are a separate matter for a personal attorney. Discord’s child-safety exposure overlaps with the Roblox lawsuits and the broader social media addiction litigation.
What Could Pay, and How Much
For context only, not a prediction: data breach settlements involving government ID images have generally offered reimbursement of documented losses, a smaller flat payment and sometimes credit or identity monitoring. A class tied to support tickets is far smaller than a typical mass breach, which can mean larger shares — or a smaller fund. You can model scenarios with the data breach settlement calculator or the payout calculator. Money from the Texas, Nevada or Brazil cases, if any, goes to governments.
How cases like this one end
Our copy of the federal courts’ own case database covers 123,245 other contract casesclosed in U.S. federal district courts between 2015 and 2025, 5.8% of them filed as class actions:
- 30.9% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.9% and 51.1%.
- 7.6% were decided on a motion before any trial.
- 1 in 71 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,369 of them (6%) record a money award at all; the median of those is $402,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Discord Lawsuit Timeline
- 1
October 3, 2025 — Breach Disclosed
Discord says its customer-service vendor 5CA was compromised; about 70,000 users may have had government-ID photos exposed. Affected users are emailed from noreply@discord.com.
- 2
October 7, 2025 — Class Action Filed
Uceta v. Discord, Inc., No. 3:25-cv-08582, is filed in the Northern District of California, alleging Discord failed to secure users’ information.
- 3
May 2026 — Nevada Sues
Nevada’s Attorney General sues under the state Deceptive Trade Practices Act, alleging Discord failed to protect children and misled parents.
- 4
May 22, 2026 — Texas Sues, Wins a TRO
Texas files in Collin County. A court signs a temporary restraining order the same day, ordering safer default settings for Texas accounts.
- 5
July 24, 2026 — Agreed Temporary Injunction
After a two-day hearing, Discord agrees to bring its UK age-assurance and safety defaults to Texas users within 90 days, reporting every 30 days.
- 6
August 2026 — Brazil Files $97 Million Suit
Brazil’s government sues Discord over child protection after failed negotiations. Discord calls the suit excessively harsh. No settlement exists in any case as of October 5, 2026.
Three Things to Watch For
A breach that exposed ID photos, plus headlines about lawsuits, is a gift to scammers:
Calls “from Discord” about the breach
Discord said it would not contact anyone about this incident by phone and that official messages come only from noreply@discord.com. A caller asking you to verify your ID or card is not Discord.
“Claim your Discord settlement” pages
There is no Discord settlement and no claim form. A site asking you to upload a driver’s license or passport to “verify” you is asking for exactly the data the breach exposed.
Free Nitro or refund DMs
Messages inside Discord promising a payout, refund or free Nitro “from the lawsuit” are a classic account-takeover lure. Courts do not pay class members through chat links.
Discord Lawsuit — Questions People Actually Ask
Is there a Discord settlement I can claim?
No. As of October 5, 2026 there is no Discord settlement, fund, administrator or claim form in the data breach class action or any state case. If a settlement is approved, an administrator notifies class members directly.
Was I part of the Discord data breach?
Only users who had contacted Discord Customer Support or Trust & Safety were involved, per Discord. Affected users were emailed from noreply@discord.com, and the email says whether an ID image may have been accessed.
What data was exposed?
Per Discord: names, usernames, emails and contact details given to support, limited billing data (payment type, last four card digits, purchase history), IP addresses and support messages. About 70,000 users may have had government-ID photos exposed. Discord said full card numbers and passwords were not involved.
Who is suing Discord over child safety?
Texas (filed May 22, 2026), Nevada (May 2026), New Jersey (April 17, 2025), Indiana and Arkansas, plus Brazil’s federal government. Many individual family lawsuits have also been filed. These are allegations; Discord disputes them.
What did the Texas court order Discord to do?
Under the agreed temporary injunction announced July 24, 2026, Discord has 90 days to give every Texas user the age-assurance and default safety protections it uses in the United Kingdom, and must report to the Attorney General every 30 days until it complies.
Will Texas or Nevada send me money?
No. State attorney general cases seek civil penalties and platform changes for the public, not payments to individual users. Texas, for example, seeks penalties of up to $10,000 per violation under its consumer-protection law.
Is this connected to the Roblox lawsuits?
They are separate cases with a shared theme: Texas has sued both companies over child safety, and families in both sets of cases allege children were contacted by adults on the platform. See our Roblox lawsuit page for that track.
What should I do right now?
If you got the breach email, keep it, watch your card statements and be wary of anyone asking for ID images. You do not need to join anything. Bookmark the open settlements list for any approved Discord settlement.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.