Discord drops the hammer on data-scraping 'Spy.pet' website, says it is 'considering appropriate legal action'

A week after a report revealed a site called Spy.pet that claimed to have scraped billions of public messages posted to Discord and was offering them for sale, Discord has banned multiple accounts connected to the site, which has now gone offline.

Discord said when Spy.pet was first reported that it was «investigating the matter,» adding that «if we determine that violations of our Terms of Service and Community Guidelines have occurred, we will take appropriate steps to enforce our policies.» And so it has: A new 404 Media report says Spy.pet was at one point scraping as many as 14,000 Discord servers, but that number had trailed down to 0 by April 25. The site itself is now offline.

«Our Safety team has been diligently investigating this activity, and we identified certain accounts that we believe are affiliated with the Spy.pet website, which we have subsequently banned,» a Discord rep told 404 Media.

«Based on our investigation, these accounts accessed Discord servers that were open and available for anyone to join or where the accounts had easy access to a valid invite link. Once in these spaces, these accounts could only access the same information as any other user in those servers.»

A Spy.pet administrator acknowledged that Discord had banned at least some of its bots, but said the server counter on the website had zeroed out because of a rewrite to Spy.pet's code. They also said the disappearance of the website was unrelated to Discord's actions, and denied that Spy.pet was meant as a «tool to be used for harassment,» despite reportedly offering the scraped content to Kiwi Farms, a site known for stalking, doxxing, and harassment.

Even if Discord hadn't taken action against Spy.pet, it seems unlikely it would've lasted for long. As StackDiary pointed out when it was first reported, Spy.pet's actions were likely a violation of the European Union's General Data Protection Regulation (GDPR), while collecting and selling data from minors would presumably be a