So, another day, another leak of 70000 people's government IDs, from Discord this time.
It seems to me that websites shouldn't be *allowed* to collect personal information unless it is absolutely necessary (an address so that they can delver a package). But we instead seem to be moving in the opposite direction with Governments around the world demanding that various websites collect ID for age verification. This is bad.
https://arstechnica.com/security/2025/10/discord-says-hackers-stole-government-ids-of-70000-users/
