Discord has reportedly shut down a site called Spy Pet that scraped Discord user data, including messages posted across servers, and sold it for crypto. It should be noted that Discord also banned several accounts associated with the Spy Pet service, which has now gone offline.
As first pointed out by StackDiary and the cash register, the website Spy.pet has deleted data, including profiles and individual messages of over 620 million Discord users, and is selling it for payments made in cryptocurrency. What’s more, Spy.pet was found to steal connected social media accounts, including Steam accounts, and offers an ‘enterprise option’ to anyone looking to train an AI model based on Discord’s message library.
As pointed out by me 404 mediaDiscord banned accounts associated with Spy.pet, which had previously scanned up to 14,000 Discord servers, bringing the number down to 0 by April 25th. Furthermore, the Spy.pet website itself is dead.
A Discord representative said, “Our security team diligently investigated this activity, and we identified certain accounts that we believe are associated with Spy.pet, which we subsequently banned.”
Spy Pet reportedly sold shredded data, including server messages, logs of which voice channels were used, login and logout times, etc., for just $5. Affected servers include those of Minecraft, Among Us and Runescape, as well as cryptocurrencies.
Spy.pet’s admin (via Telegram channel) confirmed to 404 Media that they are banned from Discord but said the eight servers on the site are showing zero due to a change in Spy.pet’s code. They also added that the removal of the site has nothing to do with Discord’s action to ban them and the bots associated with it.
Spy.pet also denied they were ‘tools to be used for harassment’, despite the reports Offers the scrap content to Kiwi farms, a site known for stalking and harassment. as StackDiary notesSpy.pet’s actions were a violation of the EU General Data Protection Regulation (GDPR), and the collection and sale of minors’ data is a violation of the US Children’s Online Privacy Protection Act (COPPA).