Your Discord Messages Have Probably Been Scraped

Just one year after the infamous spy.pet Discord scandal, a new claim has emerged with details of another massive (alleged) Discord scraping breach.

@DarkWebInformer posted the claim on Twitter, along with a screenshot of a Breach Forums listing;

The breach listing claims to have harvested over 348 million messages from public discord servers, between April 2024 and February 2025. The breach claims to include user ID, username, display name, message content, guild ID, channel ID, and timestamps; effectively creating a detailed OSINT (open-source intelligence) footprint on affected users.

The Spy.pet Scandal

This isn’t the first time Discord has fallen victim to scraping of this scale; last year, the infamous spy.pet scandal involved the harvesting of billions of messages across thousands of servers, affecting over 627 million user accounts.

Last years’ breach also contained aliases, pronouns, connected accounts, and message history. The dataset was made purchasable to anyone willing to pay – including ‘enterprise’ clients including law enforcement, federal agents, or tech companies looking for AI training data.

How Discord Handles Scrapers

Discord were seemingly unsure how to respond initially, with Ars Technica claiming Discord needed to investigate if Spy.pet had breached their terms. Ars Technica also reached out to spy.pet – apparently to no avail.

The Register later received comment from Discord that spy.pet had indeed been in breach of their terms, which they responded to by banning associated accounts from Discord, and having the spy.pet website taken down. They were ‘considering’ legal action at the time, but there are no further details about it.

The lack of public legal ramifications is shocking on its own – but a claim surfacing just one year later, which contains data captured SINCE the spy.pet scandal is worrying to say the least.

Whether or not the 2025 claim from DarkWebInformer is genuine, Discord has clearly had issues with surveillance and scraping. If you’re a Discord user, you should be concerned – especially if you’re active in public servers.

Tools used to conduct mass surveillance are commonplace in the public, and private sector; massive datasets of user info (such as spy.pet’s) can act like gasoline on the growing surveillance bonfire – opening new connections, and helping surveyors understand you, your footprint, and your connections with more depth.

What Can You Do About Discord Scraping?

First thing’s first – audit your public server memberships (but don’t leave them until you’ve reviewed and removed your messages). If you moderate any servers, audit your list of members, and consider booting silent observers.

Then, you should get started cleaning up your Discord history. Spy.pet is unlikely to be the last time Discord gets scraped that widely – it’s best your data isn’t swept up next time.

Redact.dev offers mass deletion tools for Discord – and heaps of other platforms. Specifically, you can mass delete messages from entire servers, or specific channels, to prevent being impacted by scrapers.

If you want to keep your data as secure as possible, you should consider setting up automated deletions with Redact.dev. This way, you’re able to set an ‘expiration date’ on messages you send – for example, automatically deleting any Discord messages sent to public servers after 48 hours.

Here’s some more information on Discord deletion with Redact, or if you’re already a Redacter, you might want to read our guide for Discord deletion.