Discord cuts ties with Peter Thiel-backed verification software after its code was found tied to U.S. surveillance efforts
Fortune
by Catherina GioinoFebruary 24, 2026
AI-Generated Deep Dive Summary
Discord has severed ties with its age-verification partner, Persona Identities, after researchers discovered exposed frontend code linked to U.S. government surveillance efforts. The findings revealed that Persona conducted facial recognition checks against watchlists, screened users for politically exposed persons, and performed 269 distinct verification checks, including assessments of "adverse media" across categories like terrorism and espionage. Researchers noted that the entire architecture was vulnerable, with 53 megabytes of data accessible on a government-authorized endpoint, including files tagged with codenames from intelligence programs. Discord confirmed it had cut ties with Persona after less than a month of partnership, affecting only a small number of users.
This decision comes amid growing scrutiny over third-party vendors handling sensitive user information on Discord. Last year, a breach at third-party service provider 5CA exposed government IDs of more than 70,000 users who had undergone age verification. The incident highlighted vulnerabilities in the platform's security measures, leading to concerns about how user data is managed by external partners. Earlier this month, Discord faced backlash after announcing it would default all accounts to teen-safety settings, requiring age verification for access to certain features. While the company clarified that age verification would remain optional for most users unless they sought access to age-restricted content, the exposure of Persona's ties to surveillance raised questions about its suitability for such sensitive tasks.
For businesses, this situation underscores the importance of rigorous vetting and transparency when partnering with third-party vendors. The potential risks of exposed data and links to government surveillance programs can erode user trust and lead to significant reputational damage. Discord's decision to terminate its partnership with Persona highlights the need for companies to prioritize privacy and security in their operations, especially when dealing with sensitive user information. As digital platforms continue to evolve, the stakes for maintaining trust through ethical data practices will only grow more critical.
Verticals
businessfinance
Originally published on Fortune on 2/24/2026