Arc Raiders dev Embark released a hotfix for an issue where the game's Discord was collecting way more user information than required. According to a report by Engineer Timothy D. Meadows (via GamesRadar), the Discord was recording private DM conversations between players.
According to the report, Discord DM conversations between players were found written in plaintext to a local game log file. The log also contained a Discord Bearer authentication token. Since Embark announced a hotfix to fix this issue almost immediately after the report was published, it seems this data was being collected accidentally.
"The team is also working on a hotfix to address an issue where the Discord SDK logged excessive user information," said community manager Ossen on Discord. "Rest assured that your private and/or personal data was not sent outside your machine and Embark has not (and will not) review or keep such information. We will disable the Discord SDK logging and are conducting a deeper audit to ensure no further issues. If you have questions or concerns, please contact our support team."
The report explained that a Discord Bearer token is essentially a "username and password" that allows anyone in possession to read all your messages...
