Furthermore, the breach included … content of messages exchanged with customer service agents.
In filing DMCA take down requests (among other related legal requests/complains), you have to fill out a physical address. I assume that’s how they got access to government-issued photo IDs, because appealing and updating age verification is handled via support requests/tickets. So if you’ve filled out the DMCA- or trademark-related requests before, it’s possible that your physical address has been leaked, opposite to what Discord has stated.
I find it interest that this post isn’t getting more replies considering how large of a platform Discord is. But I suppose that is because most people here do not use it.