Overview
- Distributed systems engineer Timothy D. Meadows reported that Arc Raiders wrote private Discord DMs and a full bearer token in plaintext to a local log when accounts were linked.
- Embark Studios pushed an emergency update that disables the Discord SDK’s excessive logging, and testing by outlets confirms the Discord logs no longer generate after the patch.
- Discord says the behavior stemmed from debugging features in its Social SDK, and it is updating the SDK and issuing guidance to developers to prevent similar incidents.
- Only players who linked Discord to Arc Raiders were affected, and the data stayed on users’ machines, though crash reports or other apps with file access could have exposed messages and tokens.
- Embark says it is conducting a deeper audit, while researchers advise users to change Discord passwords, disable the game’s Discord integration for now, and avoid sharing or uploading log files.