This Week in Cybersecurity: October 10

As we head deeper into October, cyber threats are continuing to proliferate. From personal ID leaks to demands for ransom at scale, here’s what’s been happening since Monday.

🆔 Discord Age-Verification Breach Exposes IDs

A third-party firm handling age-verification appeals for Discord was compromised, potentially exposing government ID photos (and related personal info) for around 70,000 users. Attackers are reportedly attempting an extortion. Discord maintains that its core systems weren’t breached, but the incident underscores risks of outsourcing sensitive workflows.

➡️ Read more on The Guardian

🏢 Qantas Among Firms Pressured in Extortion Effort

The airline Qantas has been named among dozens of major companies targeted by a hacker group demanding ransom over stolen customer data. The attackers claim to have compromised records through Salesforce-related channels and have threatened to publish the data unless paid.

➡️ Read more on 7NEWS

🔑 Key Takeaways

• Even if your systems are secure, third-party vendors handling critical or sensitive data present serious risk.

• Extortion is increasingly layered on top of data access — attackers aren’t just stealing, they’re demanding.

• Disputed scale claims (e.g. 2M vs. 70K IDs) show how narratives and leverage matter in breach aftermaths.

• Organizations dependent on centralized platforms (e.g. Salesforce, identity verification services) must audit each link carefully.

💭 Final Thoughts

This week proves that identity is now a battleground. Whether you’re verifying age, processing payments, or running CRM systems, the line between trust and exposure is thinner than ever.