User Identity Theft on Discord In October 2025, Discord, the popular communication platform for millions of users, suffered a serious personal data theft that ignited a deep debate on online user security and privacy. The alarm came directly from the company, which confirmed that the cyber attack did not hit Discord’s main servers but occurred through an external vendor tasked with managing customer service and Trust & Safety support. The attack was identified and made public in the first days of October 2025, specifically on October 5, when Discord began notifying users potentially involved in the breach. The hackers managed to obtain an impressive amount of data—about 1.5 terabytes—including approximately 70,000 images belonging to users who had contacted customer support. Among the stolen data were sensitive personal details such as names, usernames, email addresses, and contact information like mobile phone numbers. Particularly concerning was the compromise of the last four digits of credit cards and, most importantly, photographs and scans of identity documents used by users for age verification, as required by regulations in some countries like the UK under the Online Safety Act. These documents are essential for proving users are of legal age, and their exposure represents a significant risk of identity theft and fraud. According to Discord, the attack was primarily for extortion, with the cyber criminals attempting to blackmail the company by threatening to disclose the stolen data. Fortunately, the company managed to block the compromised vendor’s access to its ticketing systems and promptly initiated collaboration with the competent authorities to identify those responsible for the attack. Discord also reassured users that no data related to personal messages, private chats, or servers was touched, as these are stored on separate, more protected infrastructures. Discord itself raised the alarm about the data theft through official communications, including detailed emails to affected users, explaining precisely what information had been exposed and suggesting actions to take to protect against possible scams or abuse. The platform emphasized the importance of maintaining high vigilance regarding digital security, even in relationships with external vendors, as critical flaws can open up precisely through these indirect channels. This event has reignited the debate on the complexity of security in large technological platforms which, while investing significant resources to protect their main systems, must deploy equal attention in managing partnerships and accessory services. The management of age and digital identity verification is particularly sensitive and requires rigorous security protocols precisely because it involves highly confidential data. In conclusion, the Discord data theft highlighted how cybersecurity is a continuous and complex process that must consider all links in the service chain. For users, it is crucial to adopt personal security measures like enabling two-factor authentication and avoiding sharing sensitive documents outside of official channels, while for companies, the challenge is to ensure robust protections even in dealings with external partners and vendors. Discord has already begun to act in this direction by collaborating with authorities and strengthening its internal controls to prevent future incidents of this kind.

Iberian Peninsula Blackout: The IT Impact On April 28, 2025, a large-scale blackout affected Spain, Portugal, and part of southern France, causing severe disruptions to IT and digital systems. Impacts on IT and Digital Systems Communication network outages: mobile networks and the internet experienced major interruptions, making communication and access to information difficult. Suspension of banking and payment services: ATMs and electronic payment systems were disabled, preventing financial transactions and access to cash. Transport disruptions: rail and metro lines, including the Madrid metro, were evacuated due to power outages, blocking control and safety systems. Hospital service interruptions: hospitals had to rely on emergency generators to keep critical systems running, such as intensive care and diagnostic equipment. From the staff at Delphi Studio, an IT company in Valencia, we received reports of a power outage lasting about 12 hours. However, after power was restored, everything returned to normal and servers are operational again to continue Delphi code development. Cause Investigations Spanish and Portuguese authorities launched investigations to determine the blackout’s causes. The National Institute for Cybersecurity (Incibe) is assessing the possibility of a cyberattack, although early analyses suggest a technical issue or cable fault as the main cause. Portuguese energy company REN pointed to a rare atmospheric phenomenon called “induced atmospheric vibration” as a possible origin of the outage. Service Restoration By the evening of April 28, power was restored in many areas, with 99% of energy demand met in Spain and most substations operational in Portugal. However, the disruptions to IT and digital systems highlighted the vulnerability of critical infrastructure during prolonged power outages. This event underscores the importance of strengthening the resilience of IT systems and communication networks by implementing security measures and emergency plans to ensure continuity of essential services during crises.

Serious security breach in the Polyfill.io project: over 100,000 websites compromised. A serious supply chain attack was recently discovered involving the Polyfill.io service, used by thousands of websites to ensure compatibility with older browsers. The attack affected over 100,000 sites, raising significant concerns about online security and trust in third-party libraries. The Polyfill.io Breach Polyfill.io provides “polyfills,” pieces of JavaScript code that implement modern functionalities in older browsers. This service was compromised after the domain management was transferred to the Chinese company Funnull in February 2024. Shortly thereafter, the code distributed through Polyfill.io began to contain malicious scripts, primarily targeting mobile devices, which redirected users to sports betting sites and adult content. The Response from the Tech Community The attack raised immediate concerns among security experts and web infrastructure providers. Cloudflare and Fastly quickly implemented secure versions of the Polyfill service to mitigate the risks. Additionally, Google began notifying its advertisers about the potential risks related to sites that loaded code from Polyfill.io, blocking ads on these compromised sites. Recommendations for Webmasters Security experts strongly recommend immediately removing any references to Polyfill.io from websites. In addition, it is advised to adopt security measures such as: Implementing a Content Security Policy (CSP): to restrict the sources from which scripts can be loaded. Using Subresource Integrity (SRI): to verify that the resources downloaded have not been tampered with. Regularly Monitoring Dependencies: performing periodic security audits to detect any abnormal behavior. The Polyfill.io incident is a clear example of the risks associated with using third-party libraries and highlights the importance of adopting robust security practices to protect web infrastructure. Companies must remain vigilant, regularly update their dependencies, and follow best practices for security.